Iam-floyd

**New actions:**

- cloudwatch:DeleteMetricStream
- cloudwatch:GetMetricStream
- cloudwatch:ListMetricStreams
- cloudwatch:PutMetricStream
- cloudwatch:StartMetricStreams
- cloudwatch:StopMetricStreams
- config:DescribeAggregateComplianceByConformancePacks
- config:GetAggregateConformancePackComplianceSummary
- ec2-instance-connect:SendSerialConsoleSSHPublicKey
- frauddetector:CancelBatchPredictionJob
- frauddetector:CreateBatchPredictionJob
- frauddetector:DeleteBatchPredictionJob
- frauddetector:GetBatchPredictionJobs
- fsx:AssociateFileGateway
- fsx:DescribeAssociatedFileGateways
- fsx:DisassociateFileGateway
- route53resolver:AssociateFirewallRuleGroup
- route53resolver:CreateFirewallDomainList
- route53resolver:CreateFirewallRule
- route53resolver:CreateFirewallRuleGroup
- route53resolver:DeleteFirewallDomainList
- route53resolver:DeleteFirewallRule
- route53resolver:DeleteFirewallRuleGroup
- route53resolver:DisassociateFirewallRuleGroup
- route53resolver:GetFirewallConfig
- route53resolver:GetFirewallDomainList
- route53resolver:GetFirewallRuleGroup
- route53resolver:GetFirewallRuleGroupAssociation
- route53resolver:GetFirewallRuleGroupPolicy
- route53resolver:ImportFirewallDomains
- route53resolver:ListFirewallConfigs
- route53resolver:ListFirewallDomainLists
- route53resolver:ListFirewallDomains
- route53resolver:ListFirewallRuleGroupAssociations
- route53resolver:ListFirewallRuleGroups
- route53resolver:ListFirewallRules
- route53resolver:PutFirewallRuleGroupPolicy
- route53resolver:UpdateFirewallConfig
- route53resolver:UpdateFirewallDomains
- route53resolver:UpdateFirewallRule
- route53resolver:UpdateFirewallRuleGroupAssociation

**Updated action access level:**

- config:DescribeAggregateComplianceByConfigRules: List -> Read
- config:DescribeComplianceByConfigRule: List -> Read
- config:DescribeComplianceByResource: List -> Read
- config:DescribeConfigRuleEvaluationStatus: List -> Read
- config:DescribeConfigurationAggregatorSourcesStatus: List -> Read
- config:DescribeConfigurationRecorderStatus: List -> Read
- config:DescribeConformancePacks: Read -> List
- config:DescribeDeliveryChannelStatus: List -> Read
- config:DescribeOrganizationConfigRules: Read -> List
- config:DescribeOrganizationConformancePacks: Read -> List
- config:DescribeRemediationExecutionStatus: List -> Read
- config:ListTagsForResource: List -> Read

**New resource types:**

- cloudwatch:metric-stream
- frauddetector:batch-prediction
- route53resolver:firewall-config
- route53resolver:firewall-domain-list
- route53resolver:firewall-rule-group
- route53resolver:firewall-rule-group-association

**New condition keys:**

- comprehend:ModelKmsKey
- ram:PermissionResourceType

**New actions:**

- codeguru-reviewer:CreateCodeReview
- codeguru-reviewer:ListTagsForResource
- codeguru-reviewer:TagResource
- codeguru-reviewer:UnTagResource
- detective:ListTagsForResource
- detective:TagResource
- detective:UntagResource
- elemental-support-cases:CheckCasePermission
- iot:ConfirmTopicRuleDestination
- iot:CreateTopicRuleDestination
- iot:DeleteTopicRuleDestination
- iot:GetTopicRuleDestination
- iot:ListTopicRuleDestinations
- iot:UpdateTopicRuleDestination
- storagegateway:AssociateFileSystem
- storagegateway:DescribeFileSystemAssociations
- storagegateway:DisassociateFileSystem
- storagegateway:ListFileSystemAssociations
- storagegateway:UpdateFileSystemAssociation

**New resource types:**

- codeguru-reviewer:connection
- iot:destination
- storagegateway:fs-association

**New condition keys:**

- detective:RequestTag/${TagKey}
- detective:ResourceTag/${TagKey}
- detective:TagKeys

**New actions:**

- lookoutmetrics:ListTagsForResource
- lookoutmetrics:TagResource
- lookoutmetrics:UntagResource

**New condition keys:**

- lookoutmetrics:RequestTag/${TagKey}
- lookoutmetrics:ResourceTag/${TagKey}
- lookoutmetrics:TagKeys

:warning: **Removed resource types:**

- apigateway:apigateway-general

**New actions:**

- apigateway:AddCertificateToDomain
- apigateway:RemoveCertificateFromDomain

**Updated action access level:**

- apigateway:SetWebACL: Write -> Permissions management
- apigateway:UpdateRestApiPolicy: Write -> Permissions management

**New resource types:**

- apigateway:AccessLogSettings
- apigateway:Account
- apigateway:Api
- apigateway:ApiKey
- apigateway:ApiKeys
- apigateway:ApiMapping
- apigateway:ApiMappings
- apigateway:Apis
- apigateway:Authorizer
- apigateway:Authorizers
- apigateway:AuthorizersCache
- apigateway:BasePathMapping
- apigateway:BasePathMappings
- apigateway:ClientCertificate
- apigateway:ClientCertificates
- apigateway:Cors
- apigateway:Deployment
- apigateway:Deployments
- apigateway:DocumentationPart
- apigateway:DocumentationParts
- apigateway:DocumentationVersion
- apigateway:DocumentationVersions
- apigateway:DomainName
- apigateway:DomainNames
- apigateway:ExportedAPI
- apigateway:GatewayResponse
- apigateway:GatewayResponses
- apigateway:Integration
- apigateway:IntegrationResponse
- apigateway:IntegrationResponses
- apigateway:Integrations
- apigateway:Method
- apigateway:MethodResponse
- apigateway:Model
- apigateway:ModelTemplate
- apigateway:Models
- apigateway:RequestValidator
- apigateway:RequestValidators
- apigateway:Resource
- apigateway:Resources
- apigateway:RestApi
- apigateway:RestApis
- apigateway:Route
- apigateway:RouteRequestParameter
- apigateway:RouteResponse
- apigateway:RouteResponses
- apigateway:RouteSettings
- apigateway:Routes
- apigateway:Sdk
- apigateway:Stage
- apigateway:Stages
- apigateway:Template
- apigateway:UsagePlan
- apigateway:UsagePlanKey
- apigateway:UsagePlanKeys
- apigateway:UsagePlans
- apigateway:VpcLink
- apigateway:VpcLinks

**New condition keys:**

- apigateway:Request/AccessLoggingDestination
- apigateway:Request/AccessLoggingFormat
- apigateway:Request/ApiKeyRequired
- apigateway:Request/ApiName
- apigateway:Request/AuthorizerType
- apigateway:Request/AuthorizerUri
- apigateway:Request/DisableExecuteApiEndpoint
- apigateway:Request/EndpointType
- apigateway:Request/MtlsTrustStoreUri
- apigateway:Request/MtlsTrustStoreVersion
- apigateway:Request/RouteAuthorizationType
- apigateway:Request/SecurityPolicy
- apigateway:Request/StageName
- apigateway:RequestTag/${TagKey}
- apigateway:Resource/AccessLoggingDestination
- apigateway:Resource/AccessLoggingFormat
- apigateway:Resource/ApiKeyRequired
- apigateway:Resource/ApiName
- apigateway:Resource/AuthorizerType
- apigateway:Resource/AuthorizerUri
- apigateway:Resource/DisableExecuteApiEndpoint
- apigateway:Resource/EndpointType
- apigateway:Resource/MtlsTrustStoreUri
- apigateway:Resource/MtlsTrustStoreVersion
- apigateway:Resource/RouteAuthorizationType
- apigateway:Resource/SecurityPolicy
- apigateway:ResourceTag/${TagKey}

:warning: **Removed actions:**

- iotfleethub:CreateDashboard
- iotfleethub:DeleteDashboard
- iotfleethub:DescribeDashboard
- iotfleethub:ListDashboards
- iotfleethub:UpdateDashboard

:warning: **Removed resource types:**

- iotfleethub:dashboard

**New actions:**

- ecr-public:ListTagsForResource
- ecr-public:TagResource
- ecr-public:UntagResource

**New condition keys:**

- ecr-public:RequestTag
- ecr-public:ResourceTag
- ecr-public:TagKeys

**New actions:**

- athena:CreatePreparedStatement
- athena:DeletePreparedStatement
- athena:GetPreparedStatement
- athena:ListPreparedStatements
- athena:UpdatePreparedStatement
- gamelift:CreateFleetLocations
- gamelift:DeleteFleetLocations
- gamelift:DescribeFleetLocationAttributes
- gamelift:DescribeFleetLocationCapacity
- gamelift:DescribeFleetLocationUtilization

**Updated action access level:**

- gamelift:ListTagsForResource: List -> Read
- gamelift:RequestUploadCredentials: Read -> Write