v0.659.0

⚠️ Removed services:

• iot1click
• iotroborunner

⚠️ Removed actions:

• cloudhsm:AddTagsToResource
• cloudhsm:CreateHapg
• cloudhsm:CreateLunaClient
• cloudhsm:DeleteHapg
• cloudhsm:DeleteLunaClient
• cloudhsm:DescribeHapg
• cloudhsm:DescribeHsm
• cloudhsm:DescribeLunaClient
• cloudhsm:GetConfig
• cloudhsm:ListAvailableZones
• cloudhsm:ListHapgs
• cloudhsm:ListHsms
• cloudhsm:ListLunaClients
• cloudhsm:ListTagsForResource
• cloudhsm:ModifyHapg
• cloudhsm:ModifyHsm
• cloudhsm:ModifyLunaClient
• cloudhsm:RemoveTagsFromResource
• elemental-activations:GetActivation
• elemental-activations:ListTagsForResource
• elemental-activations:StartAccountRegistration
• elemental-activations:TagResource
• elemental-activations:UntagResource
• elemental-appliances-software:ListTagsForResource
• elemental-appliances-software:TagResource
• elemental-appliances-software:UntagResource
• glue:BatchPutDataQualityStatisticAnnotation
• glue:ListDataQualityStatisticAnnotations
• glue:ListDataQualityStatistics
• iot1click:AssociateDeviceWithPlacement
• iot1click:ClaimDevicesByClaimCode
• iot1click:CreatePlacement
• iot1click:CreateProject
• iot1click:DeletePlacement
• iot1click:DeleteProject
• iot1click:DescribeDevice
• iot1click:DescribePlacement
• iot1click:DescribeProject
• iot1click:DisassociateDeviceFromPlacement
• iot1click:FinalizeDeviceClaim
• iot1click:GetDeviceMethods
• iot1click:GetDevicesInPlacement
• iot1click:InitiateDeviceClaim
• iot1click:InvokeDeviceMethod
• iot1click:ListDeviceEvents
• iot1click:ListDevices
• iot1click:ListPlacements
• iot1click:ListProjects
• iot1click:ListTagsForResource
• iot1click:TagResource
• iot1click:UnclaimDevice
• iot1click:UntagResource
• iot1click:UpdateDeviceState
• iot1click:UpdatePlacement
• iot1click:UpdateProject
• iotroborunner:CreateDestination
• iotroborunner:CreateSite
• iotroborunner:CreateWorker
• iotroborunner:CreateWorkerFleet
• iotroborunner:DeleteDestination
• iotroborunner:DeleteSite
• iotroborunner:DeleteWorker
• iotroborunner:DeleteWorkerFleet
• iotroborunner:GetDestination
• iotroborunner:GetSite
• iotroborunner:GetWorker
• iotroborunner:GetWorkerFleet
• iotroborunner:ListDestinations
• iotroborunner:ListSites
• iotroborunner:ListWorkerFleets
• iotroborunner:ListWorkers
• iotroborunner:UpdateDestination
• iotroborunner:UpdateSite
• iotroborunner:UpdateWorker
• iotroborunner:UpdateWorkerFleet
• rds:DescribeDbSnapshotTenantDatabases

⚠️ Removed condition keys:

• elemental-activations:RequestTag/${TagKey}
• elemental-activations:ResourceTag/${TagKey}
• elemental-activations:TagKeys
• elemental-appliances-software:RequestTag/${TagKey}
• elemental-appliances-software:ResourceTag/${TagKey}
• elemental-appliances-software:TagKeys
• iot1click:RequestTag/${TagKey}
• iot1click:ResourceTag/${TagKey}
• iot1click:TagKeys
• iotroborunner:DestinationResourceId
• iotroborunner:SiteResourceId
• iotroborunner:WorkerFleetResourceId
• iotroborunner:WorkerResourceId
• omics:AnnotationImportJobJobId
• omics:AnnotationStoreName
• omics:AnnotationStoreVersionName
• omics:VariantImportJobJobId
• omics:VariantStoreName
• ssm:SessionDocumentAccessCheck

⚠️ Removed resource types:

• elemental-activations:activation
• iot1click:device
• iot1click:project
• iotroborunner:DestinationResource
• iotroborunner:SiteResource
• iotroborunner:WorkerFleetResource
• iotroborunner:WorkerResource
• omics:AnnotationImportJob
• omics:VariantImportJob

New services:

• aiops
• backup-search
• bcm-#-calculator
• ds-data
• dsql
• geo-maps
• geo-places
• geo-routes
• networkflowmonitor
• observabilityadmin
• opensearch
• partnercentral
• pcs
• s3tables
• sagemaker-data-science-assistant
• security-ir
• social-messaging
• vpce

New actions:

• access-analyzer:UpdateAnalyzer
• airflow:InvokeRestApi
• app-integrations:UpdateDataIntegrationAssociation
• appconfig:GetAccountSettings
• appconfig:UpdateAccountSettings
• application-autoscaling:GetPredictiveScalingForecast
• application-signals:ListObservedEntities
• appstream:CreateThemeForStack
• appstream:DeleteThemeForStack
• appstream:DescribeThemeForStack
• appstream:UpdateThemeForStack
• appsync:CreateApi
• appsync:CreateChannelNamespace
• appsync:DeleteApi
• appsync:DeleteChannelNamespace
• appsync:EventConnect
• appsync:EventPublish
• appsync:EventSubscribe
• appsync:GetApi
• appsync:GetChannelNamespace
• appsync:ListApis
• appsync:ListChannelNamespaces
• appsync:UpdateApi
• appsync:UpdateChannelNamespace
• aps:UpdateScraper
• artifact:AcceptNdaForAgreement
• artifact:GetAgreement
• artifact:GetCustomerAgreement
• artifact:GetNdaForAgreement
• artifact:ListAgreements
• artifact:ListCustomerAgreements
• aws-marketplace:GetBuyerDashboard
• aws-marketplace:ListAgreementCharges
• aws-marketplace:UpdatePurchaseOrders
• b2bi:CreateStarterMappingTemplate
• b2bi:GenerateMapping
• b2bi:TestConversion
• backup:GetRecoveryPointIndexDetails
• backup:ListIndexedRecoveryPoints
• backup:ListIndexedRecoveryPointsForSearch
• backup:SearchRecoveryPoint
• backup:UpdateRecoveryPointIndexSettings
• bedrock:AssociateAgentCollaborator
• bedrock:BatchDeleteEvaluationJob
• bedrock:CreateBlueprint
• bedrock:CreateBlueprintVersion
• bedrock:CreateDataAutomationProject
• bedrock:CreateInferenceProfile
• bedrock:CreateMarketplaceModelEndpoint
• bedrock:CreateModelImportJob
• bedrock:DeleteBlueprint
• bedrock:DeleteDataAutomationProject
• bedrock:DeleteImportedModel
• bedrock:DeleteInferenceProfile
• bedrock:DeleteKnowledgeBaseDocuments
• bedrock:DeleteMarketplaceModelAgreement
• bedrock:DeleteMarketplaceModelEndpoint
• bedrock:DeleteResourcePolicy
• bedrock:DeregisterMarketplaceModelEndpoint
• bedrock:DisassociateAgentCollaborator
• bedrock:GenerateQuery
• bedrock:GetAgentCollaborator
• bedrock:GetAsyncInvoke
• bedrock:GetBlueprint
• bedrock:GetBlueprintRecommendation
• bedrock:GetDataAutomationProject
• bedrock:GetDataAutomationStatus
• bedrock:GetImportedModel
• bedrock:GetInferenceProfile
• bedrock:GetKnowledgeBaseDocuments
• bedrock:GetMarketplaceModelEndpoint
• bedrock:GetModelImportJob
• bedrock:GetPromptRouter
• bedrock:GetResourcePolicy
• bedrock:IngestKnowledgeBaseDocuments
• bedrock:InvokeBlueprintRecommendationAsync
• bedrock:InvokeBuilder
• bedrock:InvokeDataAutomationAsync
• bedrock:InvokeInlineAgent
• bedrock:ListAgentCollaborators
• bedrock:ListAsyncInvokes
• bedrock:ListBlueprints
• bedrock:ListDataAutomationProjects
• bedrock:ListImportedModels
• bedrock:ListInferenceProfiles
• bedrock:ListKnowledgeBaseDocuments
• bedrock:ListMarketplaceModelEndpoints
• bedrock:ListModelImportJobs
• bedrock:ListPromptRouters
• bedrock:OptimizePrompt
• bedrock:PutResourcePolicy
• bedrock:RegisterMarketplaceModelEndpoint
• bedrock:RenderPrompt
• bedrock:Rerank
• bedrock:StopIngestionJob
• bedrock:UpdateAgentCollaborator
• bedrock:UpdateBlueprint
• bedrock:UpdateDataAutomationProject
• bedrock:UpdateMarketplaceModelEndpoint
• bedrock:ValidateFlowDefinition
• billing:CreateBillingView
• billing:DeleteBillingView
• billing:DeleteResourcePolicy
• billing:GetBillingView
• billing:GetResourcePolicy
• billing:ListSourceViewsForBillingView
• billing:ListTagsForResource
• billing:PutResourcePolicy
• billing:TagResource
• billing:UntagResource
• billing:UpdateBillingView
• ce:GetCommitmentPurchaseAnalysis
• ce:ListCommitmentPurchaseAnalyses
• ce:StartCommitmentPurchaseAnalysis
• chatbot:AssociateToConfiguration
• chatbot:CreateCustomAction
• chatbot:DeleteCustomAction
• chatbot:DisassociateFromConfiguration
• chatbot:GetCustomAction
• chatbot:ListAssociations
• chatbot:ListCustomActions
• chatbot:UpdateCustomAction
• chime:AssociateVoiceConnectorConnect
• chime:CreateConnectAnalyticsConnector
• chime:CreateConnectCallTransferConnector
• chime:DeleteVoiceConnectorExternalSystemsConfiguration
• chime:DisassociateVoiceConnectorConnect
• chime:GetVoiceConnectorExternalSystemsConfiguration
• chime:PutVoiceConnectorExternalSystemsConfiguration
• cleanrooms-ml:CancelTrainedModel
• cleanrooms-ml:CancelTrainedModelInferenceJob
• cleanrooms-ml:CreateConfiguredModelAlgorithm
• cleanrooms-ml:CreateConfiguredModelAlgorithmAssociation
• cleanrooms-ml:CreateMLInputChannel
• cleanrooms-ml:CreateTrainedModel
• cleanrooms-ml:DeleteConfiguredModelAlgorithm
• cleanrooms-ml:DeleteConfiguredModelAlgorithmAssociation
• cleanrooms-ml:DeleteMLConfiguration
• cleanrooms-ml:DeleteMLInputChannelData
• cleanrooms-ml:DeleteTrainedModelOutput
• cleanrooms-ml:GetCollaborationConfiguredModelAlgorithmAssociation
• cleanrooms-ml:GetCollaborationMLInputChannel
• cleanrooms-ml:GetCollaborationTrainedModel
• cleanrooms-ml:GetConfiguredModelAlgorithm
• cleanrooms-ml:GetConfiguredModelAlgorithmAssociation
• cleanrooms-ml:GetMLConfiguration
• cleanrooms-ml:GetMLInputChannel
• cleanrooms-ml:GetTrainedModel
• cleanrooms-ml:GetTrainedModelInferenceJob
• cleanrooms-ml:ListCollaborationConfiguredModelAlgorithmAssociations
• cleanrooms-ml:ListCollaborationMLInputChannels
• cleanrooms-ml:ListCollaborationTrainedModelExportJobs
• cleanrooms-ml:ListCollaborationTrainedModelInferenceJobs
• cleanrooms-ml:ListCollaborationTrainedModels
• cleanrooms-ml:ListConfiguredModelAlgorithmAssociations
• cleanrooms-ml:ListConfiguredModelAlgorithms
• cleanrooms-ml:ListMLInputChannels
• cleanrooms-ml:ListTrainedModelInferenceJobs
• cleanrooms-ml:ListTrainedModels
• cleanrooms-ml:PutMLConfiguration
• cleanrooms-ml:StartTrainedModelExportJob
• cleanrooms-ml:StartTrainedModelInferenceJob
• cleanrooms:PassCollaboration
• cleanrooms:PassMembership
• cloudformation:ListHookResults
• cloudfront:AllowVendedLogDeliveryForResource
• cloudfront:CreateAnycastIpList
• cloudfront:CreateVpcOrigin
• cloudfront:DeleteAnycastIpList
• cloudfront:DeleteVpcOrigin
• cloudfront:GetAnycastIpList
• cloudfront:GetVpcOrigin
• cloudfront:ListAnycastIpLists
• cloudfront:ListDistributionsByAnycastIpListId
• cloudfront:ListDistributionsByVpcOriginId
• cloudfront:ListVpcOrigins
• cloudfront:UpdateVpcOrigin
• cloudtrail:CreateDashboard
• cloudtrail:DeleteDashboard
• cloudtrail:GenerateQueryResultsSummary
• cloudtrail:GetDashboard
• cloudtrail:ListDashboards
• cloudtrail:StartDashboardRefresh
• cloudtrail:UpdateDashboard
• cloudwatch:ListEntitiesForMetric
• codeconnections:GetConnectionToken
• codepipeline:ListRuleExecutions
• codepipeline:ListRuleTypes
• codepipeline:OverrideStageCondition
• codestar-connections:GetConnectionToken
• cognito-idp:CreateManagedLoginBranding
• cognito-idp:DeleteManagedLoginBranding
• cognito-idp:DescribeManagedLoginBranding
• cognito-idp:DescribeManagedLoginBrandingByClient
• cognito-idp:UpdateManagedLoginBranding
• compute-optimizer:ExportIdleRecommendations
• compute-optimizer:GetIdleRecommendations
• config:AssociateResourceTypes
• config:DeleteServiceLinkedConfigurationRecorder
• config:DisassociateResourceTypes
• config:ListConfigurationRecorders
• config:PutServiceLinkedConfigurationRecorder
• connect-campaigns:DeleteCampaignChannelSubtypeConfig
• connect-campaigns:DeleteCampaignCommunicationLimits
• connect-campaigns:DeleteCampaignCommunicationTime
• connect-campaigns:DeleteConnectInstanceIntegration
• connect-campaigns:ListConnectInstanceIntegrations
• connect-campaigns:PutConnectInstanceIntegration
• connect-campaigns:PutOutboundRequestBatch
• connect-campaigns:PutProfileOutboundRequestBatch
• connect-campaigns:UpdateCampaignChannelSubtypeConfig
• connect-campaigns:UpdateCampaignCommunicationLimits
• connect-campaigns:UpdateCampaignCommunicationTime
• connect-campaigns:UpdateCampaignFlowAssociation
• connect-campaigns:UpdateCampaignSchedule
• connect-campaigns:UpdateCampaignSource
• connect:AssociateAnalyticsDataSet
• connect:CreateContactFlowVersion
• connect:CreateHoursOfOperationOverride
• connect:CreatePushNotificationRegistration
• connect:DeleteHoursOfOperationOverride
• connect:DeletePushNotificationRegistration
• connect:DescribeHoursOfOperationOverride
• connect:DisassociateAnalyticsDataSet
• connect:GetEffectiveHoursOfOperations
• connect:ListAnalyticsDataAssociations
• connect:ListContactFlowVersions
• connect:ListHoursOfOperationOverrides
• connect:SearchHoursOfOperationOverrides
• connect:SendIntegrationEvent
• connect:SendOutboundEmail
• connect:StartEmailContact
• connect:StartOutboundChatContact
• connect:StartScreenSharing
• connect:UpdateHoursOfOperationOverride
• connect:UpdateParticipantAuthentication
• controlcatalog:GetControl
• controlcatalog:ListControls
• controltower:ResetEnabledControl
• dataexchange:AcceptDataGrant
• dataexchange:CreateDataGrant
• dataexchange:DeleteDataGrant
• dataexchange:GetDataGrant
• dataexchange:GetReceivedDataGrant
• dataexchange:ListDataGrants
• dataexchange:ListReceivedDataGrants
• dataexchange:PublishToDataGrant
• datazone:AddEntityOwner
• datazone:BatchDeleteLinkedTypes
• datazone:BatchPutLinkedTypes
• datazone:CreateConnection
• datazone:CreateDataProduct
• datazone:CreateDataProductRevision
• datazone:CreateDomainUnit
• datazone:CreateProjectProfile
• datazone:CreateRule
• datazone:DeleteConnection
• datazone:DeleteDataProduct
• datazone:DeleteDomainUnit
• datazone:DeleteProjectProfile
• datazone:DeleteRule
• datazone:GetConnection
• datazone:GetDataProduct
• datazone:GetDomainExecutionRoleCredentials
• datazone:GetDomainUnit
• datazone:GetJobRun
• datazone:GetLineageEvent
• datazone:GetProjectProfile
• datazone:GetRule
• datazone:ListConnections
• datazone:ListDataProductRevisions
• datazone:ListDomainUnitsForParent
• datazone:ListEntityOwners
• datazone:ListJobRuns
• datazone:ListLineageEvents
• datazone:ListLinkedTypes
• datazone:ListProjectProfiles
• datazone:ListRules
• datazone:RemoveEntityOwner
• datazone:SearchRules
• datazone:UpdateConnection
• datazone:UpdateDomainUnit
• datazone:UpdateProjectProfile
• datazone:UpdateRule
• deadline:GetJobTemplate
• deadline:ListJobParameterDefinitions
• deepracer:AdminDescribeAccountKey
• deepracer:AdminUpdateAccountKey
• docdb-elastic:ApplyPendingMaintenanceAction
• docdb-elastic:GetPendingMaintenanceAction
• docdb-elastic:ListPendingMaintenanceActions
• ds:AccessDSData
• ds:DescribeDirectoryDataAccess
• ds:DisableDirectoryDataAccess
• ds:EnableDirectoryDataAccess
• dynamodb:GetAbacStatus
• dynamodb:UpdateAbacStatus
• ec2:AcceptCapacityReservationBillingOwnership
• ec2:AssociateCapacityReservationBillingOwner
• ec2:AssociateSecurityGroupVpc
• ec2:CancelDeclarativePoliciesReport
• ec2:CreateCapacityReservationBySplitting
• ec2:CreateIpamExternalResourceVerificationToken
• ec2:CreateVpcBlockPublicAccessExclusion
• ec2:DeleteIpamExternalResourceVerificationToken
• ec2:DeleteVpcBlockPublicAccessExclusion
• ec2:DescribeCapacityBlockExtensionHistory
• ec2:DescribeCapacityBlockExtensionOfferings
• ec2:DescribeCapacityReservationBillingRequests
• ec2:DescribeDeclarativePoliciesReports
• ec2:DescribeInstanceImageMetadata
• ec2:DescribeIpamExternalResourceVerificationTokens
• ec2:DescribeSecurityGroupVpcAssociations
• ec2:DescribeVpcBlockPublicAccessExclusions
• ec2:DescribeVpcBlockPublicAccessOptions
• ec2:DescribeVpcEndpointAssociations
• ec2:DisableAllowedImagesSettings
• ec2:DisassociateCapacityReservationBillingOwner
• ec2:DisassociateSecurityGroupVpc
• ec2:EnableAllowedImagesSettings
• ec2:ExportVerifiedAccessInstanceClientConfiguration
• ec2:GetAllowedImagesSettings
• ec2:GetDeclarativePoliciesReportSummary
• ec2:GetVerifiedAccessEndpointTargets
• ec2:ModifyInstanceCpuOptions
• ec2:ModifyVpcBlockPublicAccessExclusion
• ec2:ModifyVpcBlockPublicAccessOptions
• ec2:MoveCapacityReservationInstances
• ec2:PurchaseCapacityBlockExtension
• ec2:RejectCapacityReservationBillingOwnership
• ec2:ReplaceImageCriteriaInAllowedImagesSettings
• ec2:StartDeclarativePoliciesReport
• ecr:GetAccountSetting
• ecr:PutAccountSetting
• ecs:DescribeServiceDeployments
• ecs:DescribeServiceRevisions
• ecs:ListServiceDeployments
• eks:DescribeClusterVersions
• elasticfilesystem:ReplicationRead
• elasticfilesystem:ReplicationWrite
• elasticloadbalancing:DescribeCapacityReservation
• elasticloadbalancing:DescribeListenerAttributes
• elasticloadbalancing:ModifyCapacityReservation
• elasticloadbalancing:ModifyListenerAttributes
• elemental-activations:ConfirmAccount
• elemental-activations:DownloadKickstart
• elemental-activations:GenerateLicense
• elemental-activations:GetArtifactGroupSoftwareVersions
• elemental-activations:GetAsset
• elemental-activations:GetAssets
• elemental-activations:GetProductAdvisories
• elemental-activations:GetSoftwareVersions
• elemental-support-cases:AddCaseComment
• elemental-support-cases:CompleteMultipartUpload
• elemental-support-cases:CreateS3CLIUploadCommand
• elemental-support-cases:CreateS3DownloadUrl
• elemental-support-cases:GetCasePermission
• elemental-support-cases:GetUICache
• elemental-support-cases:ListTagsForCase
• elemental-support-cases:StartMultipartUpload
• elemental-support-cases:TagCase
• elemental-support-cases:UntagCase
• elemental-support-cases:UpdateCaseStatus
• elemental-support-cases:UpdateMultipartUpload
• es:AddDirectQueryDataSource
• es:AssociatePackages
• es:CreateApplication
• es:DeleteApplication
• es:DeleteDirectQueryDataSource
• es:DissociatePackages
• es:GetApplication
• es:GetDirectQueryDataSource
• es:ListApplications
• es:ListDirectQueryDataSources
• es:UpdateApplication
• es:UpdateDirectQueryDataSource
• es:UpdatePackageScope
• fis:GetSafetyLever
• fis:UpdateSafetyLeverState
• gamelift:CreateContainerFleet
• gamelift:DeleteContainerFleet
• gamelift:DescribeContainerFleet
• gamelift:DescribeFleetDeployment
• gamelift:ListContainerFleets
• gamelift:ListContainerGroupDefinitionVersions
• gamelift:ListFleetDeployments
• gamelift:TerminateGameSession
• gamelift:UpdateContainerFleet
• gamelift:UpdateContainerGroupDefinition
• glue:AuthorizeInboundIntegration
• glue:CreateCatalog
• glue:CreateColumnStatisticsTaskSettings
• glue:CreateInboundIntegration
• glue:CreateIntegration
• glue:CreateIntegrationResourceProperty
• glue:CreateIntegrationTableProperties
• glue:DeleteCatalog
• glue:DeleteColumnStatisticsTaskSettings
• glue:DeleteIntegration
• glue:DeleteIntegrationTableProperties
• glue:DescribeInboundIntegrations
• glue:DescribeIntegrations
• glue:GetCatalog
• glue:GetCatalogs
• glue:GetColumnStatisticsTaskSettings
• glue:GetDashboardUrl
• glue:GetEntityRecords
• glue:GetGeneratedCode
• glue:GetIntegrationResourceProperty
• glue:GetIntegrationTableProperties
• glue:GetJobUpgradeAnalysis
• glue:GetRecipeAction
• glue:ListJobUpgradeAnalyses
• glue:ModifyIntegration
• glue:PutDataQualityStatisticAnnotation
• glue:SendRecipeAction
• glue:StartColumnStatisticsTaskRunSchedule
• glue:StartJobUpgradeAnalysis
• glue:StopColumnStatisticsTaskRunSchedule
• glue:StopJobUpgradeAnalysis
• glue:UpdateCatalog
• glue:UpdateColumnStatisticsTaskSettings
• glue:UpdateIntegrationResourceProperty
• glue:UpdateIntegrationTableProperties
• glue:UpgradeJob
• healthlake:CancelFHIRExportJobWithDelete
• healthlake:DescribeFHIRExportJobWithGet
• healthlake:StartFHIRExportJobWithPost
• iam:DisableOrganizationsRootCredentialsManagement
• iam:DisableOrganizationsRootSessions
• iam:EnableOrganizationsRootCredentialsManagement
• iam:EnableOrganizationsRootSessions
• iam:ListOrganizationsFeatures
• imagebuilder:GetMarketplaceResource
• invoicing:BatchGetInvoiceProfile
• invoicing:CreateInvoiceUnit
• invoicing:DeleteInvoiceUnit
• invoicing:GetInvoiceUnit
• invoicing:ListInvoiceUnits
• invoicing:ListTagsForResource
• invoicing:TagResource
• invoicing:UntagResource
• invoicing:UpdateInvoiceUnit
• iot:AssociateSbomWithPackageVersion
• iot:CreateCommand
• iot:DeleteCommand
• iot:DeleteCommandExecution
• iot:DisassociateSbomFromPackageVersion
• iot:GetCommand
• iot:GetCommandExecution
• iot:GetThingConnectivityData
• iot:ListCommandExecutions
• iot:ListCommands
• iot:ListSbomValidationResults
• iot:StartCommandExecution
• iot:UpdateCommand
• iot:UpdateThingType
• iotfleetwise:CreateStateTemplate
• iotfleetwise:DeleteStateTemplate
• iotfleetwise:GenerateCommandPayload
• iotfleetwise:GetStateTemplate
• iotfleetwise:ListStateTemplates
• iotfleetwise:UpdateStateTemplate
• iotsitewise:CreateDataset
• iotsitewise:DeleteDataset
• iotsitewise:DescribeDataset
• iotsitewise:InvokeAssistant
• iotsitewise:ListDatasets
• iotsitewise:UpdateDataset
• ivs:CreateIngestConfiguration
• ivs:DeleteIngestConfiguration
• ivs:GetIngestConfiguration
• ivs:ListIngestConfigurations
• ivs:UpdateIngestConfiguration
• kinesisanalytics:DescribeApplicationOperation
• kinesisanalytics:ListApplicationOperations
• kinesisvideo:JoinStorageSessionAsViewer
• lakeformation:CreateLFTagExpression
• lakeformation:DeleteLFTagExpression
• lakeformation:GetLFTagExpression
• lakeformation:ListLFTagExpressions
• lakeformation:UpdateLFTagExpression
• lambda:GetFunctionRecursionConfig
• lambda:PutFunctionRecursionConfig
• license-manager-user-subscriptions:CreateLicenseServerEndpoint
• license-manager-user-subscriptions:DeleteLicenseServerEndpoint
• license-manager-user-subscriptions:ListLicenseServerEndpoints
• license-manager-user-subscriptions:ListTagsForResource
• license-manager-user-subscriptions:TagResource
• license-manager-user-subscriptions:UntagResource
• logs:DeleteIndexPolicy
• logs:DeleteIntegration
• logs:DeleteTransformer
• logs:DescribeConfigurationTemplates
• logs:DescribeFieldIndexes
• logs:DescribeIndexPolicies
• logs:GetIntegration
• logs:GetTransformer
• logs:ListEntitiesForLogGroup
• logs:ListIntegrations
• logs:ListLogGroupsForEntity
• logs:ListLogGroupsForQuery
• logs:PutIndexPolicy
• logs:PutIntegration
• logs:PutTransformer
• logs:TestTransformer
• logs:UpdateDeliveryConfiguration
• mediaconnect:DescribeFlowSourceThumbnail
• mediaconvert:ListVersions
• medialive:CreateChannelPlacementGroup
• medialive:CreateCluster
• medialive:CreateNetwork
• medialive:CreateNode
• medialive:CreateNodeRegistrationScript
• medialive:DeleteChannelPlacementGroup
• medialive:DeleteCluster
• medialive:DeleteNetwork
• medialive:DeleteNode
• medialive:DescribeChannelPlacementGroup
• medialive:DescribeCluster
• medialive:DescribeNetwork
• medialive:DescribeNode
• medialive:ListChannelPlacementGroups
• medialive:ListClusters
• medialive:ListNetworks
• medialive:ListNodes
• medialive:PollAnywhere
• medialive:SubmitAnywhereStateChange
• medialive:UpdateChannelPlacementGroup
• medialive:UpdateCluster
• medialive:UpdateNetwork
• medialive:UpdateNode
• medialive:UpdateNodeState
• mediapackagev2:CancelHarvestJob
• mediapackagev2:CreateHarvestJob
• mediapackagev2:GetHarvestJob
• mediapackagev2:HarvestObject
• mediapackagev2:ListHarvestJobs
• memorydb:CreateMultiRegionCluster
• memorydb:DeleteMultiRegionCluster
• memorydb:DescribeMultiRegionClusters
• memorydb:DescribeMultiRegionParameterGroups
• memorydb:DescribeMultiRegionParameters
• memorydb:ListAllowedMultiRegionClusterUpdates
• memorydb:UpdateMultiRegionCluster
• mgh:AcceptConnection
• mgh:AssociateAutomationUnitRole
• mgh:AssociateSourceResource
• mgh:BatchAssociateIamRoleWithConnection
• mgh:BatchDisassociateIamRoleFromConnection
• mgh:CreateAutomationRun
• mgh:CreateAutomationUnit
• mgh:DeleteAutomationRun
• mgh:DeleteAutomationUnit
• mgh:DeleteConnection
• mgh:DescribeAutomationRun
• mgh:DescribeAutomationUnit
• mgh:DisassociateAutomationUnitRole
• mgh:DisassociateSourceResource
• mgh:GetConnection
• mgh:ListAutomationRuns
• mgh:ListAutomationUnits
• mgh:ListConnectionRoles
• mgh:ListConnections
• mgh:ListMigrationTaskUpdates
• mgh:ListSourceResources
• mgh:ListTagsForResource
• mgh:RejectConnection
• mgh:TagResource
• mgh:UntagResource
• mgn:CreateNetworkMigrationDefinition
• mgn:DeleteNetworkMigrationDefinition
• mgn:GetNetworkMigrationDefinition
• mgn:GetNetworkMigrationMapperSegmentConstruct
• mgn:ListNetworkMigrationAnalyses
• mgn:ListNetworkMigrationAnalysisResults
• mgn:ListNetworkMigrationCodeGenerationSegments
• mgn:ListNetworkMigrationCodeGenerations
• mgn:ListNetworkMigrationDefinitions
• mgn:ListNetworkMigrationDeployedStacks
• mgn:ListNetworkMigrationDeployedStacksDeletions
• mgn:ListNetworkMigrationDeployments
• mgn:ListNetworkMigrationExecutions
• mgn:ListNetworkMigrationMapperSegmentConstructs
• mgn:ListNetworkMigrationMapperSegments
• mgn:ListNetworkMigrationMappings
• mgn:StartNetworkMigrationAnalysis
• mgn:StartNetworkMigrationCodeGeneration
• mgn:StartNetworkMigrationDeployedStacksDeletion
• mgn:StartNetworkMigrationDeployment
• mgn:StartNetworkMigrationMapping
• mgn:UpdateNetworkMigrationDefinition
• mgn:UpdateNetworkMigrationMapperSegment
• mgn:UpdateNetworkMigrationMapperSegmentConstruct
• neptune-graph:CancelExportTask
• neptune-graph:GetExportTask
• neptune-graph:ListExportTasks
• neptune-graph:StartExportTask
• networkmanager:CreateDirectConnectGatewayAttachment
• networkmanager:GetDirectConnectGatewayAttachment
• networkmanager:UpdateDirectConnectGatewayAttachment
• omics:CreateRunCache
• omics:DeleteRunCache
• omics:DeleteS3AccessPolicy
• omics:GetRunCache
• omics:GetS3AccessPolicy
• omics:ListRunCaches
• omics:PutS3AccessPolicy
• omics:UpdateRunCache
• omics:UpdateSequenceStore
• outposts:ListAssetInstances
• outposts:ListBlockingInstancesForCapacityTask
• payment-cryptography:GenerateMacEmvPinChange
• payments:AcceptFinancingApplicationTerms
• payments:CreateFinancingApplication
• payments:GetFinancingApplication
• payments:GetFinancingLine
• payments:GetFinancingLineWithdrawal
• payments:GetFinancingOption
• payments:ListFinancingApplications
• payments:ListFinancingLineWithdrawals
• payments:ListFinancingLines
• payments:ListPaymentProgramOptions
• payments:ListPaymentProgramStatus
• payments:UpdateFinancingApplication
• personalize:UpdateSolution
• profile:BatchGetCalculatedAttributeForProfile
• profile:BatchGetProfile
• profile:CreateEventTrigger
• profile:CreateSegmentDefinition
• profile:CreateSegmentEstimate
• profile:CreateSegmentSnapshot
• profile:DeleteEventTrigger
• profile:DeleteSegmentDefinition
• profile:GetEventTrigger
• profile:GetSegmentDefinition
• profile:GetSegmentEstimate
• profile:GetSegmentMembership
• profile:GetSegmentSnapshot
• profile:ListEventTriggers
• profile:ListObjectTypeAttributes
• profile:ListProfileAttributeValues
• profile:ListSegmentDefinitions
• profile:UpdateEventTrigger
• q:CreatePlugin
• q:DeletePlugin
• q:GenerateCodeFromCommands
• q:GetPlugin
• q:ListDashboardMetrics
• q:ListPluginProviders
• q:ListPlugins
• q:ListTagsForResource
• q:TagResource
• q:UntagResource
• q:UsePlugin
• qapps:BatchCreateCategory
• qapps:BatchDeleteCategory
• qapps:BatchUpdateCategory
• qapps:CreatePresignedUrl
• qapps:DescribeQAppPermissions
• qapps:ExportQAppSessionData
• qapps:ListCategories
• qapps:ListQAppSessionData
• qapps:UpdateLibraryItemMetadata
• qapps:UpdateQAppPermissions
• qbusiness:AllowVendedLogDeliveryForResource
• qbusiness:AssociatePermission
• qbusiness:CreateDataAccessor
• qbusiness:CreateIntegration
• qbusiness:DeleteDataAccessor
• qbusiness:DeleteIntegration
• qbusiness:DisableAclOnDataSource
• qbusiness:DisassociatePermission
• qbusiness:GetDataAccessor
• qbusiness:GetIntegration
• qbusiness:GetMedia
• qbusiness:GetPolicy
• qbusiness:ListAttachments
• qbusiness:ListDataAccessors
• qbusiness:ListIntegrations
• qbusiness:ListPluginActions
• qbusiness:ListPluginTypeActions
• qbusiness:ListPluginTypeMetadata
• qbusiness:PutResourcePolicy
• qbusiness:SearchRelevantContent
• qbusiness:StartDeployment
• qbusiness:UpdateDataAccessor
• qbusiness:UpdateIntegration
• quicksight:CreateBrand
• quicksight:DeleteBrand
• quicksight:DeleteBrandAssignment
• quicksight:DeleteDefaultQBusinessApplication
• quicksight:DeleteUserCustomPermission
• quicksight:DescribeBrand
• quicksight:DescribeBrandAssignment
• quicksight:DescribeBrandPublishedVersion
• quicksight:DescribeDashboardsQAConfiguration
• quicksight:DescribeDefaultQBusinessApplication
• quicksight:DescribeQPersonalizationConfiguration
• quicksight:DescribeQuickSightQSearchConfiguration
• quicksight:GenerateEmbedUrlForRegisteredUserWithIdentity
• quicksight:ListBrands
• quicksight:ListFoldersForResource
• quicksight:PredictQAResults
• quicksight:SearchTopics
• quicksight:StartDashboardSnapshotJobSchedule
• quicksight:UpdateApplicationWithTokenExchangeGrant
• quicksight:UpdateBrand
• quicksight:UpdateBrandAssignment
• quicksight:UpdateBrandPublishedVersion
• quicksight:UpdateDashboardsQAConfiguration
• quicksight:UpdateDefaultQBusinessApplication
• quicksight:UpdateQPersonalizationConfiguration
• quicksight:UpdateQuickSightQSearchConfiguration
• quicksight:UpdateUserCustomPermission
• rds:CopyCustomDBEngineVersion
• rds:DescribeDBSnapshotTenantDatabases
• redshift-data:GetStagingBucketLocation
• redshift-serverless:GetManagedWorkgroup
• redshift-serverless:ListManagedWorkgroups
• redshift:AuthorizeInboundIntegration
• redshift:CreateInboundIntegration
• redshift:CreateIntegration
• redshift:DeleteIntegration
• redshift:DeregisterNamespace
• redshift:DescribeIntegrations
• redshift:ModifyIntegration
• redshift:RegisterNamespace
• repostspace:BatchAddRole
• repostspace:BatchRemoveRole
• resiliencehub:DescribeMetricsExport
• resiliencehub:ListMetrics
• resiliencehub:StartMetricsExport
• resource-explorer-2:CreateManagedView
• resource-explorer-2:GetManagedView
• resource-explorer-2:ListManagedViews
• resource-groups:CancelTagSyncTask
• resource-groups:GetTagSyncTask
• resource-groups:ListGroupingStatuses
• resource-groups:ListTagSyncTasks
• resource-groups:StartTagSyncTask
• route53profiles:GetProfilePolicy
• route53profiles:PutProfilePolicy
• s3:CreateBucketMetadataTableConfiguration
• s3:DeleteBucketMetadataTableConfiguration
• s3:GetBucketMetadataTableConfiguration
• s3:ListCallerAccessGrants
• s3express:GetEncryptionConfiguration
• s3express:GetLifecycleConfiguration
• s3express:PutEncryptionConfiguration
• s3express:PutLifecycleConfiguration
• sagemaker-mlflow:DeleteTraceTag
• sagemaker-mlflow:DeleteTraces
• sagemaker-mlflow:EndTrace
• sagemaker-mlflow:GetTraceInfo
• sagemaker-mlflow:SearchTraces
• sagemaker-mlflow:SetTraceTag
• sagemaker-mlflow:StartTrace
• sagemaker:BatchDeleteClusterNodes
• sagemaker:CallPartnerAppApi
• sagemaker:CreateClusterSchedulerConfig
• sagemaker:CreateComputeQuota
• sagemaker:CreatePartnerApp
• sagemaker:CreatePartnerAppPresignedUrl
• sagemaker:CreateReservedCapacity
• sagemaker:CreateTrainingPlan
• sagemaker:DeleteClusterSchedulerConfig
• sagemaker:DeleteComputeQuota
• sagemaker:DeletePartnerApp
• sagemaker:DescribeClusterSchedulerConfig
• sagemaker:DescribeComputeQuota
• sagemaker:DescribePartnerApp
• sagemaker:DescribeTrainingPlan
• sagemaker:ListClusterSchedulerConfigs
• sagemaker:ListComputeQuotas
• sagemaker:ListPartnerApps
• sagemaker:ListTrainingPlans
• sagemaker:SearchTrainingPlanOfferings
• sagemaker:UpdateClusterSchedulerConfig
• sagemaker:UpdateComputeQuota
• sagemaker:UpdatePartnerApp
• scn:CreateDataIntegrationFlow
• scn:CreateDataLakeDataset
• scn:DeleteDataIntegrationFlow
• scn:DeleteDataLakeDataset
• scn:GetDataIntegrationFlow
• scn:GetDataLakeDataset
• scn:GetInstance
• scn:ListDataIntegrationFlows
• scn:ListDataLakeDatasets
• scn:UpdateDataIntegrationFlow
• scn:UpdateDataLakeDataset
• servicecatalog:DeleteResourcePolicy
• servicecatalog:GetResourcePolicy
• servicecatalog:PutResourcePolicy
• servicediscovery:DeleteServiceAttributes
• servicediscovery:GetServiceAttributes
• servicediscovery:UpdateServiceAttributes
• ses:AllowVendedLogDeliveryForResource
• ses:CreateMultiRegionEndpoint
• ses:DeleteMultiRegionEndpoint
• ses:GetMultiRegionEndpoint
• ses:ListMultiRegionEndpoints
• ses:ReplicateEmailIdentityDkimSigningKey
• sms-voice:DeleteProtectConfigurationRuleSetNumberOverride
• sms-voice:DeleteResourcePolicy
• sms-voice:GetResourcePolicy
• sms-voice:ListProtectConfigurationRuleSetNumberOverrides
• sms-voice:PutMessageFeedback
• sms-voice:PutProtectConfigurationRuleSetNumberOverride
• sms-voice:PutResourcePolicy
• sms-voice:SetDefaultMessageFeedbackEnabled
• sqlworkbench:DeleteQCustomContext
• sqlworkbench:DeleteSqlGenerationContext
• sqlworkbench:GetQCustomContext
• sqlworkbench:GetQSqlPromptQuotas
• sqlworkbench:GetSqlGenerationContext
• sqlworkbench:GetSqlRecommendations
• sqlworkbench:PassAccountSettings
• sqlworkbench:PutQCustomContext
• sqlworkbench:PutSqlGenerationContext
• ssm-guiconnect:ListConnections
• ssm-quicksetup:GetConfiguration
• ssm-quicksetup:ListConfigurations
• ssm:ExecuteAPI
• ssm:GetExecutionPreview
• ssm:ListNodes
• ssm:ListNodesSummary
• ssm:StartExecutionPreview
• sso-directory:GetGroupId
• sso-directory:GetUserId
• sso-directory:ListGroups
• sso-directory:ListUsers
• sts:AssumeRoot
• supportplans:ListSupportPlanModifiers
• tax:DeleteSupplementalTaxRegistration
• tax:ListSupplementalTaxRegistrations
• tax:PutSupplementalTaxRegistration
• thinclient:GetDeviceDetails
• transfer:CreateWebApp
• transfer:DeleteWebApp
• transfer:DeleteWebAppCustomization
• transfer:DescribeWebApp
• transfer:DescribeWebAppCustomization
• transfer:ListFileTransferResults
• transfer:ListWebApps
• transfer:UpdateWebApp
• transfer:UpdateWebAppCustomization
• vpc-lattice:AssociateViaAWSServiceEventsAndStates
• vpc-lattice:CreateResourceConfiguration
• vpc-lattice:CreateResourceGateway
• vpc-lattice:CreateServiceNetworkResourceAssociation
• vpc-lattice:CreateServiceNetworkVpcEndpointAssociation
• vpc-lattice:DeleteResourceConfiguration
• vpc-lattice:DeleteResourceEndpointAssociation
• vpc-lattice:DeleteResourceGateway
• vpc-lattice:DeleteServiceNetworkResourceAssociation
• vpc-lattice:GetResourceConfiguration
• vpc-lattice:GetResourceGateway
• vpc-lattice:GetServiceNetworkResourceAssociation
• vpc-lattice:ListResourceConfigurations
• vpc-lattice:ListResourceEndpointAssociations
• vpc-lattice:ListResourceGateways
• vpc-lattice:ListServiceNetworkResourceAssociations
• vpc-lattice:ListServiceNetworkVpcEndpointAssociations
• vpc-lattice:UpdateResourceConfiguration
• vpc-lattice:UpdateResourceGateway
• wickr:DeleteNetwork
• wisdom:ActivateMessageTemplate
• wisdom:AllowVendedLogDeliveryForResource
• wisdom:CreateAIAgent
• wisdom:CreateAIAgentVersion
• wisdom:CreateAIGuardrail
• wisdom:CreateAIGuardrailVersion
• wisdom:CreateAIPrompt
• wisdom:CreateAIPromptVersion
• wisdom:CreateMessageTemplate
• wisdom:CreateMessageTemplateAttachment
• wisdom:CreateMessageTemplateVersion
• wisdom:DeactivateMessageTemplate
• wisdom:DeleteAIAgent
• wisdom:DeleteAIAgentVersion
• wisdom:DeleteAIGuardrail
• wisdom:DeleteAIGuardrailVersion
• wisdom:DeleteAIPrompt
• wisdom:DeleteAIPromptVersion
• wisdom:DeleteMessageTemplate
• wisdom:DeleteMessageTemplateAttachment
• wisdom:GetAIAgent
• wisdom:GetAIGuardrail
• wisdom:GetAIPrompt
• wisdom:GetMessageTemplate
• wisdom:GetNextMessage
• wisdom:ListAIAgentVersions
• wisdom:ListAIAgents
• wisdom:ListAIGuardrailVersions
• wisdom:ListAIGuardrails
• wisdom:ListAIPromptVersions
• wisdom:ListAIPrompts
• wisdom:ListMessageTemplateVersions
• wisdom:ListMessageTemplates
• wisdom:ListMessages
• wisdom:RemoveAssistantAIAgent
• wisdom:RenderMessageTemplate
• wisdom:SearchMessageTemplates
• wisdom:SendMessage
• wisdom:UpdateAIAgent
• wisdom:UpdateAIGuardrail
• wisdom:UpdateAIPrompt
• wisdom:UpdateAssistantAIAgent
• wisdom:UpdateMessageTemplate
• wisdom:UpdateMessageTemplateMetadata
• wisdom:UpdateSessionData
• workmail:CreateIdentityCenterApplication
• workmail:DeleteIdentityCenterApplication
• workmail:DeleteIdentityProviderConfiguration
• workmail:DeletePersonalAccessToken
• workmail:DescribeIdentityProviderConfiguration
• workmail:GetPersonalAccessTokenMetadata
• workmail:ListPersonalAccessTokens
• workmail:PutIdentityProviderConfiguration
• workspaces-web:ExpireSession
• workspaces-web:GetSession
• workspaces-web:ListSessions
• xray:CancelTraceRetrieval
• xray:GetIndexingRules
• xray:GetRetrievedTracesGraph
• xray:GetTraceSegmentDestination
• xray:ListRetrievedTraces
• xray:PutSpans
• xray:PutSpansForIndexing
• xray:StartTraceRetrieval
• xray:UpdateIndexingRule
• xray:UpdateTraceSegmentDestination

Updated action access level:

• config:DescribeConfigurationRecorders: List -> Read
• elemental-activations:CompleteAccountRegistration: Read -> Write
• elemental-activations:CompleteFileUpload: Read -> Write
• elemental-activations:GenerateLicenses: Read -> Write
• elemental-activations:StartFileUpload: Read -> Write
• elemental-appliances-software:CreateQuote: Tagging -> Write
• healthlake:ListTagsForResource: Read -> List
• quicksight:CreateCustomPermissions: Permissions management -> Write
• quicksight:DeleteCustomPermissions: Permissions management -> Write
• quicksight:DescribeCustomPermissions: Write -> Read
• quicksight:ListCustomPermissions: Write -> List
• quicksight:UpdateCustomPermissions: Permissions management -> Write

New resource types:

• appsync:api
• appsync:channelNamespace
• aws-marketplace:Dashboard
• bedrock:application-inference-profile
• bedrock:async-invoke
• bedrock:bedrock-marketplace-model-endpoint
• bedrock:blueprint
• bedrock:data-automation-invocation-job
• bedrock:data-automation-project
• bedrock:default-prompt-router
• bedrock:imported-model
• bedrock:inference-profile
• bedrock:model-import-job
• billing:billingview
• ce:billingview
• chatbot:custom-action
• cleanrooms-ml:ConfiguredModelAlgorithm
• cleanrooms-ml:ConfiguredModelAlgorithmAssociation
• cleanrooms-ml:MLInputChannel
• cleanrooms-ml:TrainedModel
• cleanrooms-ml:TrainedModelInferenceJob
• cloudfront:anycast-ip-list
• cloudfront:vpcorigin
• cloudtrail:dashboard
• config:ConfigurationRecorder
• controlcatalog:control
• dataexchange:data-grants
• ec2:declarative-policies-report
• ec2:ipam-external-resource-verification-token
• ec2:verified-access-endpoint-target
• ec2:vpc-block-public-access-exclusion
• ecs:service-deployment
• ecs:service-revision
• elemental-support-cases:case
• es:application
• es:datasource
• events:create-snapshot
• events:reboot-instance
• events:stop-instance
• events:terminate-instance
• fis:safety-lever
• gamelift:containerFleet
• glue:integration
• glue:rootcatalog
• invoicing:invoice-unit
• iot:command
• iotfleetwise:statetemplate
• iotsitewise:dataset
• ivs:Ingest-Configuration
• license-manager-user-subscriptions:identity-provider
• license-manager-user-subscriptions:instance-user
• license-manager-user-subscriptions:license-server-endpoint
• license-manager-user-subscriptions:product-subscription
• medialive:channel-placement-group
• medialive:cluster
• medialive:network
• medialive:node
• mediapackagev2:ChannelPolicy
• mediapackagev2:HarvestJob
• mediapackagev2:OriginEndpointPolicy
• memorydb:multiregioncluster
• memorydb:multiregionparametergroup
• mgh:AutomationRunResource
• mgh:AutomationUnitResource
• mgh:ConnectionResource
• mgn:NetworkMigrationDefinitionResource
• neptune-graph:export-task
• omics:runCache
• profile:event-triggers
• profile:segment-definitions
• q:plugin
• q:profile
• qbusiness:data-accessor
• qbusiness:integration
• quicksight:brand
• quicksight:custompermissions
• redshift-data:managed-workgroup
• redshift-serverless:managed-workgroup
• redshift:integration
• resource-explorer-2:managed-view
• resource-groups:tagSyncTask
• sagemaker:cluster-scheduler-config
• sagemaker:compute-quota
• sagemaker:partner-app
• sagemaker:reserved-capacity
• sagemaker:training-plan
• scn:data-integration-flow
• scn:dataset
• ses:multi-region-endpoint
• sms-voice:Message
• ssm:iam-role
• sts:root-user
• transfer:webapp
• vpc-lattice:ResourceConfiguration
• vpc-lattice:ResourceEndpointAssociation
• vpc-lattice:ResourceGateway
• vpc-lattice:ServiceNetworkResourceAssociation
• wisdom:AIAgent
• wisdom:AIGuardrail
• wisdom:AIPrompt
• wisdom:MessageTemplate

New condition keys:

• arc-zonal-shift:ResourceIdentifier
• autoscaling:CapacityReservationIds
• autoscaling:CapacityReservationResourceGroupArns
• backup:Index
• batch:EKSNamespace
• bedrock:InferenceProfileArn
• bedrock:PromptRouterArn
• billing:RequestTag/${TagKey}
• billing:ResourceTag/${TagKey}
• billing:TagKeys
• cloudformation:CreateAction
• config:ConfigurationRecorderServicePrincipal
• connect:AssignmentType
• connect:FlowType
• connect:Subtype
• dms:assessment-run-tag/${TagKey}
• dms:individual-assessment-tag/${TagKey}
• dynamodb:RequestTag/${TagKey}
• dynamodb:ResourceTag/${TagKey}
• dynamodb:TagKeys
• ec2:CpuOptionsAmdSevSnp
• ec2:CreateDate
• ec2:DestinationCapacityReservationId
• ec2:EndDate
• ec2:EndDateType
• ec2:InstanceCount
• ec2:InstanceMatchCriteria
• ec2:InstancePlatform
• ec2:Location
• ec2:ManagedResourceOperator
• ec2:SourceAvailabilityZone
• ec2:SourceCapacityReservationId
• ec2:vpceMultiRegion
• ec2:vpceServiceRegion
• ec2:vpceSupportedRegion
• ecr:AccountSetting
• ecs:enable-vpc-lattice
• eks:blockStorageEnabled
• eks:computeConfigEnabled
• eks:elasticLoadBalancingEnabled
• elasticache:MinimumDataStorage
• elasticache:MinimumECPUPerSecond
• elemental-support-cases:RequestTag/${TagKey}
• elemental-support-cases:ResourceTag/${TagKey}
• elemental-support-cases:TagKeys
• glue:EnabledForRedshiftAutoDiscovery
• invoicing:RequestTag/${TagKey}
• invoicing:ResourceTag/${TagKey}
• invoicing:TagKeys
• iot:CommandExecutionParameterBoolean/${CommandParameterName}
• iot:CommandExecutionParameterNumber/${CommandParameterName}
• iot:CommandExecutionParameterString/${CommandParameterName}
• iotfleetwise:Signals
• kinesis:RequestTag/${TagKey}
• kinesis:ResourceTag/${TagKey}
• kinesis:TagKeys
• license-manager-user-subscriptions:RequestTag/${TagKey}
• license-manager-user-subscriptions:ResourceTag/${TagKey}
• license-manager-user-subscriptions:TagKeys
• mgh:AutomationRunResourceRunID
• mgh:AutomationUnitResourceAutomationUnitArn
• mgh:ConnectionResourceConnectionArn
• mgh:RequestTag/${TagKey}
• mgh:ResourceTag/${TagKey}
• mgh:TagKeys
• networkmanager:directConnectGatewayArn
• networkmanager:edgeLocations
• q:GroupId
• q:RequestTag/${TagKey}
• q:ResourceTag/${TagKey}
• q:TagKeys
• q:UserId
• qbusiness:GroupId
• qbusiness:UserId
• quicksight:Group
• quicksight:GroupId
• redshift-data:glue-catalog-arn
• redshift-data:session-owner-iam-userid
• redshift-serverless:managedWorkgroupName
• redshift:IntegrationSourceArn
• redshift:IntegrationTargetArn
• resource-explorer-2:Operation
• route53:VPCs
• s3:ObjectCreationOperation
• s3:if-match
• s3:if-none-match
• s3express:AllAccessRestrictedToLocalZoneGroup
• s3express:x-amz-server-side-encryption
• s3express:x-amz-server-side-encryption-aws-kms-key-id
• sagemaker-mlflow:ResourceTag/${TagKey}
• ses:MultiRegionEndpointId
• ses:ReplicaRegion
• ssm:Policies
• sts:TaskPolicyArn
• vpc-lattice:ResourceConfigurationArn
• vpc-lattice:VpcEndpointId
• wisdom:MessageTemplate/RoutingProfileArn
• wisdom:SearchFilter/Qualifier