Iam-floyd

**New actions:**

- fsx:CopyBackup
- fsx:ManageBackupPrincipalAssociations
- groundtruthlabeling:AssociatePatchToManifestJob

**Updated action access level:**

- fsx:DescribeAssociatedFileGateways: Write -> Read

**New condition keys:**

- fsx:IsBackupCopyDestination
- fsx:IsBackupCopySource

:warning: **Removed resource types:**

- ses:event-destination
- ses:receipt-filter
- ses:receipt-rule
- ses:receipt-rule-set

**New actions:**

- dbqms:CreateTab
- dbqms:DeleteTab
- dbqms:DescribeTabs
- dbqms:UpdateTab

**Updated action access level:**

- lookoutvision:DetectAnomalies: Read -> Write
- ses:DeleteIdentityPolicy: Write -> Permissions management
- ses:ListReceiptFilters: List -> Read
- ses:ListReceiptRuleSets: List -> Read
- ses:ListVerifiedEmailAddresses: List -> Read
- ses:PutIdentityPolicy: Write -> Permissions management

**New resource types:**

- iotwireless:SidewalkAccount
- iotwireless:WirelessGatewayTaskDefinition

**New actions:**

- access-analyzer:CancelPolicyGeneration
- access-analyzer:GetGeneratedPolicy
- access-analyzer:ListPolicyGenerations
- access-analyzer:StartPolicyGeneration
- honeycode:CreateTeam
- honeycode:DeregisterGroups
- honeycode:DescribeTeam
- honeycode:ListDomains
- honeycode:ListGroups
- honeycode:RegisterDomainForVerification
- honeycode:RegisterGroups
- honeycode:RestartDomainVerification
- honeycode:UpdateTeam
- ivs:CreateRecordingConfiguration
- ivs:DeleteRecordingConfiguration
- ivs:GetRecordingConfiguration
- ivs:ListRecordingConfigurations

**Updated action access level:**

- firehose:DescribeDeliveryStream: List -> Read
- firehose:TagDeliveryStream: Write -> Tagging
- firehose:UntagDeliveryStream: Write -> Tagging

**New resource types:**

- ivs:Recording-Configuration

**New condition keys:**

- elasticache:AtRestEncryptionEnabled
- elasticache:AuthTokenEnabled
- elasticache:AutomaticFailoverEnabled
- elasticache:CacheNodeType
- elasticache:CacheParameterGroupName
- elasticache:ClusterModeEnabled
- elasticache:EngineType
- elasticache:EngineVersion
- elasticache:KmsKeyId
- elasticache:MultiAZEnabled
- elasticache:NumNodeGroups
- elasticache:ReplicasPerNodeGroup
- elasticache:RequestTag/${TagKey}
- elasticache:ResourceTag/${TagKey}
- elasticache:SnapshotRetentionLimit
- elasticache:TagKeys
- elasticache:TransitEncryptionEnabled

**New services:**

- mgn

**New actions:**

- shield:AssociateHealthCheck
- shield:AssociateProactiveEngagementDetails
- shield:CreateProtectionGroup
- shield:DeleteProtectionGroup
- shield:DescribeAttackStatistics
- shield:DescribeProtectionGroup
- shield:DisableProactiveEngagement
- shield:DisassociateHealthCheck
- shield:EnableProactiveEngagement
- shield:ListProtectionGroups
- shield:ListResourcesInProtectionGroup
- shield:ListTagsForResource
- shield:TagResource
- shield:UntagResource
- shield:UpdateProtectionGroup

**New resource types:**

- shield:protection-group

**New condition keys:**

- shield:RequestTag/${TagKey}
- shield:ResourceTag/${TagKey}
- shield:TagKeys

:warning: **Removed resource types:**

- lightsail:PeeredVpc

**New actions:**

- lightsail:AttachCertificateToDistribution
- lightsail:CreateCertificate
- lightsail:CreateContactMethod
- lightsail:CreateContainerService
- lightsail:CreateContainerServiceDeployment
- lightsail:CreateContainerServiceRegistryLogin
- lightsail:CreateDistribution
- lightsail:DeleteAlarm
- lightsail:DeleteAutoSnapshot
- lightsail:DeleteCertificate
- lightsail:DeleteContactMethod
- lightsail:DeleteContainerImage
- lightsail:DeleteContainerService
- lightsail:DeleteDistribution
- lightsail:DetachCertificateFromDistribution
- lightsail:DisableAddOn
- lightsail:EnableAddOn
- lightsail:GetAlarms
- lightsail:GetAutoSnapshots
- lightsail:GetCertificates
- lightsail:GetContactMethods
- lightsail:GetContainerAPIMetadata
- lightsail:GetContainerImages
- lightsail:GetContainerLog
- lightsail:GetContainerServiceDeployments
- lightsail:GetContainerServiceMetricData
- lightsail:GetContainerServicePowers
- lightsail:GetContainerServices
- lightsail:GetDistributionBundles
- lightsail:GetDistributionLatestCacheReset
- lightsail:GetDistributionMetricData
- lightsail:GetDistributions
- lightsail:PutAlarm
- lightsail:RegisterContainerImage
- lightsail:ResetDistributionCache
- lightsail:SendContactMethodVerification
- lightsail:SetIpAddressType
- lightsail:TestAlarm
- lightsail:UpdateContainerService
- lightsail:UpdateDistribution
- lightsail:UpdateDistributionBundle
- rekognition:ListTagsForResource
- rekognition:TagResource
- rekognition:UntagResource

**Updated action access level:**

- lightsail:GetBlueprints: List -> Read
- lightsail:GetBundles: List -> Read
- lightsail:GetCloudFormationStackRecords: List -> Read
- lightsail:GetDiskSnapshots: List -> Read
- lightsail:GetDisks: List -> Read
- lightsail:GetExportSnapshotRecords: List -> Read
- lightsail:GetInstanceSnapshots: List -> Read
- lightsail:GetKeyPair: List -> Read
lightsail:GetKeyPairs;Read
- lightsail:GetRegions: List -> Read
-lightsail:GetRelationalDatabase;List
-lightsail:GetRelationalDatabaseBlueprints;List
- lightsail:GetRelationalDatabaseBundles: List -> Read
+lightsail:GetRelationalDatabaseBlueprints;Read
+lightsail:GetRelationalDatabaseBundles;Read
lightsail:GetRelationalDatabaseEvents;Read
lightsail:GetRelationalDatabaseLogEvents;Read
lightsail:GetRelationalDatabaseLogStreams;Read
lightsail:GetRelationalDatabaseMasterUserPassword;Write
lightsail:GetRelationalDatabaseMetricData;Read
-lightsail:GetRelationalDatabaseParameters;List
-lightsail:GetRelationalDatabaseSnapshot;List
- lightsail:GetRelationalDatabaseSnapshots: List -> Read
+lightsail:GetRelationalDatabaseSnapshot;Read
+lightsail:GetRelationalDatabaseSnapshots;Read
lightsail:GetRelationalDatabases;Read
- lightsail:GetRelationalDatabaseBlueprints: List -> Read
- lightsail:GetRelationalDatabaseBundles: List -> Read
- lightsail:GetRelationalDatabaseParameters: List -> Read
-lightsail:GetRelationalDatabaseSnapshot;List
- lightsail:GetRelationalDatabaseSnapshots: List -> Read
+lightsail:GetRelationalDatabaseSnapshots;Read
- lightsail:GetRelationalDatabaseSnapshots: List -> Read
- lightsail:TagResource: Write -> Tagging
- lightsail:UntagResource: Write -> Tagging

**New resource types:**

- lightsail:Alarm
- lightsail:Certificate
- lightsail:ContactMethod
- lightsail:ContainerService
- lightsail:Distribution

**New condition keys:**

- rekognition:RequestTag/${TagKey}
- rekognition:ResourceTag/${TagKey}
- rekognition:TagKeys