Iam-floyd

**New actions:**

- cloudfront:CreateOriginAccessControl
- cloudfront:CreateSavingsPlan
- cloudfront:DeleteOriginAccessControl
- cloudfront:GetOriginAccessControl
- cloudfront:GetOriginAccessControlConfig
- cloudfront:GetSavingsPlan
- cloudfront:ListOriginAccessControls
- cloudfront:ListRateCards
- cloudfront:ListSavingsPlans
- cloudfront:ListUsages
- cloudfront:UpdateOriginAccessControl
- cloudfront:UpdateSavingsPlan
- workdocs:AddNotificationPermissions
- workdocs:DeleteNotificationPermissions
- workdocs:DescribeNotificationPermissions
- workmail:AssumeImpersonationRole
- workmail:CreateImpersonationRole
- workmail:DeleteImpersonationRole
- workmail:GetImpersonationRole
- workmail:GetImpersonationRoleEffect
- workmail:ListImpersonationRoles
- workmail:UpdateImpersonationRole
- workspaces-web:AssociateUserAccessLoggingSettings
- workspaces-web:CreateUserAccessLoggingSettings
- workspaces-web:DeleteUserAccessLoggingSettings
- workspaces-web:DisassociateUserAccessLoggingSettings
- workspaces-web:GetUserAccessLoggingSettings
- workspaces-web:ListUserAccessLoggingSettings
- workspaces-web:UpdateUserAccessLoggingSettings

**New resource types:**

- cloudfront:origin-access-control
- workspaces-web:userAccessLoggingSettings

:warning: **Removed resource types:**

- cloudfront:field-level-encryption

**New actions:**

- lookoutequipment:ListInferenceEvents

**New resource types:**

- cloudfront:field-level-encryption-config

**New actions:**

- translate:ListTagsForResource
- translate:TagResource
- translate:UntagResource

**Updated action access level:**

- sns:SetTopicAttributes: Write -> Permissions management

**New condition keys:**

- translate:RequestTag/${TagKey}
- translate:ResourceTag/${TagKey}
- translate:TagKeys

:warning: **Removed condition keys:**

- ec2:ResourceTag/

**New actions:**

- backup-gateway:GetVirtualMachine
- ec2:CreateCoipCidr
- ec2:CreateCoipPool
- ec2:CreateLocalGatewayRouteTable
- ec2:CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation
- ec2:DeleteCoipCidr
- ec2:DeleteCoipPool
- ec2:DeleteLocalGatewayRouteTable
- ec2:DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation

**New resource types:**

- ec2:coip-pool
- ec2:vpc-endpoint-connection
- ec2:vpc-endpoint-service-permission

**New actions:**

- tiros:GetExtensionAccounts