Iam-floyd

**New actions:**

- cloudhsm:ModifyBackupAttributes
- cloudhsm:ModifyCluster
- connect:ListRealtimeContactAnalysisSegments
- guardduty:GetMemberDetectors
- guardduty:GetUsageStatistics
- guardduty:UpdateMemberDetectors
- mgh:ListApplicationStates
- redshift:ModifyAquaConfiguration

**New actions:**

- amplify:ListTagsForResource
- ec2:DisableSerialConsoleAccess
- ec2:EnableSerialConsoleAccess
- ec2:GetSerialConsoleAccessStatus
- glue:ResumeWorkflowRun
- glue:StopWorkflowRun
- grafana:AssociateLicense
- grafana:DisassociateLicense
- inspector:CreateExclusionsPreview
- inspector:DescribeExclusions
- inspector:GetAssessmentReport
- inspector:GetExclusionsPreview
- inspector:ListExclusions

**Updated action access level:**

- glue:DeleteResourcePolicy: Write -> Permissions management
- glue:PutResourcePolicy: Write -> Permissions management
- inspector:ListTagsForResource: List -> Read

**New condition keys:**

- ec2:NewInstanceProfile

**New actions:**

- cloudfront:CreateKeyGroup
- cloudfront:CreateMonitoringSubscription
- cloudfront:CreateRealtimeLogConfig
- cloudfront:DeleteKeyGroup
- cloudfront:DeleteMonitoringSubscription
- cloudfront:DeleteRealtimeLogConfig
- cloudfront:GetKeyGroup
- cloudfront:GetKeyGroupConfig
- cloudfront:GetMonitoringSubscription
- cloudfront:GetRealtimeLogConfig
- cloudfront:ListDistributionsByKeyGroup
- cloudfront:ListDistributionsByRealtimeLogConfig
- cloudfront:ListKeyGroups
- cloudfront:ListRealtimeLogConfigs
- cloudfront:UpdateKeyGroup
- cloudfront:UpdateRealtimeLogConfig
- greengrass:GetComponentVersionArtifact
- greengrass:ResolveComponentCandidates
- quicksight:GetAnonymousUserEmbedUrl
- resource-groups:PutGroupConfiguration
- servicecatalog:DescribePortfolioShares
- servicecatalog:GetProvisionedProductOutputs
- servicecatalog:UpdatePortfolioShare

**Updated action access level:**

- quicksight:CreateCustomPermissions: Write -> Permissions management
- quicksight:DeleteCustomPermissions: Write -> Permissions management
- quicksight:ListIngestions: Read -> List
- quicksight:ListNamespaces: Write -> List
- quicksight:SearchDirectoryGroups: Write -> List
- quicksight:UpdateAnalysisPermissions: Write -> Permissions management
- quicksight:UpdateCustomPermissions: Write -> Permissions management
- quicksight:UpdateDashboardPermissions: Write -> Permissions management
- quicksight:UpdateTemplatePermissions: Write -> Permissions management
- quicksight:UpdateThemePermissions: Write -> Permissions management

**New resource types:**

- cloudfront:realtime-log-config

**New resource types:**

- mobiletargeting:phone-number-validate

**New actions:**

- iot:CancelDetectMitigationActionsTask
- iot:CreateCustomMetric
- iot:DeleteCustomMetric
- iot:DescribeCustomMetric
- iot:DescribeDetectMitigationActionsTask
- iot:GetBehaviorModelTrainingSummaries
- iot:ListCustomMetrics
- iot:ListDetectMitigationActionsExecutions
- iot:ListDetectMitigationActionsTasks
- iot:StartDetectMitigationActionsTask
- iot:UpdateCustomMetric
- iotanalytics:ListDatasetContents
- route53:ActivateKeySigningKey
- route53:CreateKeySigningKey
- route53:DeactivateKeySigningKey
- route53:DeleteKeySigningKey
- route53:DisableHostedZoneDNSSEC
- route53:EnableHostedZoneDNSSEC
- route53:GetDNSSEC
- sts:SetSourceIdentity

**New resource types:**

- iot:custommetric

**New condition keys:**

- sts:SourceIdentity

**New actions:**

- a4b:AssociateDeviceWithNetworkProfile
- a4b:CreateGatewayGroup
- a4b:CreateNetworkProfile
- a4b:DeleteDeviceUsageData
- a4b:DeleteGatewayGroup
- a4b:DeleteNetworkProfile
- a4b:GetGateway
- a4b:GetGatewayGroup
- a4b:GetInvitationConfiguration
- a4b:ListGatewayGroups
- a4b:ListGateways
- a4b:PutInvitationConfiguration
- a4b:SendAnnouncement
- a4b:UpdateGateway
- a4b:UpdateGatewayGroup
- a4b:UpdateNetworkProfile
- imagebuilder:ImportComponent

**New resource types:**

- a4b:gateway
- a4b:gatewaygroup