Iam-floyd

**New actions:**

- chime:DeregisterAppInstanceUserEndpoint
- chime:DescribeAppInstanceUserEndpoint
- chime:GetChannelMembershipPreferences
- chime:ListAppInstanceUserEndpoints
- chime:PutChannelMembershipPreferences
- chime:RegisterAppInstanceUserEndpoint
- chime:UpdateAppInstanceUserEndpoint

**New condition keys:**

- sts:AWSServiceName

**New services:**

- resiliencehub

**New actions:**

- route53resolver:GetResolverConfig
- route53resolver:ListResolverConfigs
- route53resolver:UpdateResolverConfig

**New resource types:**

- route53resolver:resolver-config

:warning: **Removed actions:**

- greengrass:ListTagsForResource

**New actions:**

- batch:CreateSchedulingPolicy
- batch:DeleteSchedulingPolicy
- batch:DescribeSchedulingPolicies
- batch:ListSchedulingPolicies
- batch:UpdateSchedulingPolicy
- devops-guru:DescribeOrganizationHealth
- devops-guru:DescribeOrganizationOverview
- devops-guru:DescribeOrganizationResourceCollectionHealth
- devops-guru:ListOrganizationInsights
- devops-guru:SearchOrganizationInsights
- greengrass:BatchAssociateClientDeviceWithCoreDevice
- greengrass:BatchDisassociateClientDeviceFromCoreDevice
- greengrass:ListClientDevicesAssociatedWithCoreDevice

**New resource types:**

- batch:scheduling-policy

**New condition keys:**

- batch:ShareIdentifier

**New actions:**

- directconnect:ConfirmCustomerAgreement
- directconnect:DescribeCustomerMetadata
- directconnect:DescribeRouterConfiguration
- directconnect:UpdateDirectConnectGateway
- ec2:DescribeCapacityReservationFleets
- mgn:CreateVcenterClientForMgn
- mgn:DeleteVcenterClient
- mgn:DescribeVcenterClients
- mgn:GetVcenterClientCommandsForMgn
- mgn:NotifyVcenterClientStartedForMgn
- mgn:SendVcenterClientCommandResultForMgn
- mgn:SendVcenterClientLogsForMgn
- mgn:SendVcenterClientMetricsForMgn
- mgn:StartReplication
- mgn:UpdateSourceServerReplicationType

**Updated action access level:**

- directconnect:DescribeLocations: List -> Read
- route53:ListGeoLocations: List -> Read
- route53:ListHealthChecks: List -> Read
- route53:ListReusableDelegationSets: List -> Read
-route53:ListTagsForResource;List
- route53:ListTagsForResources: List -> Read
+route53:ListTagsForResources;Read
- route53:ListTagsForResources: List -> Read
- route53:ListTrafficPolicyInstances: List -> Read
route53:ListTrafficPolicyInstancesByHostedZone;List
route53:ListTrafficPolicyInstancesByPolicy;List

**New resource types:**

- mgn:VcenterClientResource

**New condition keys:**

- secretsmanager:AddReplicaRegions
- secretsmanager:ForceOverwriteReplicaSecret

**New actions:**

- iotwireless:AssociateMulticastGroupWithFuotaTask
- iotwireless:AssociateWirelessDeviceWithFuotaTask
- iotwireless:AssociateWirelessDeviceWithMulticastGroup
- iotwireless:CancelMulticastGroupSession
- iotwireless:CreateFuotaTask
- iotwireless:CreateMulticastGroup
- iotwireless:DeleteFuotaTask
- iotwireless:DeleteMulticastGroup
- iotwireless:DisassociateMulticastGroupFromFuotaTask
- iotwireless:DisassociateWirelessDeviceFromFuotaTask
- iotwireless:DisassociateWirelessDeviceFromMulticastGroup
- iotwireless:GetFuotaTask
- iotwireless:GetMulticastGroup
- iotwireless:GetMulticastGroupSession
- iotwireless:GetResourceEventConfiguration
- iotwireless:ListFuotaTasks
- iotwireless:ListMulticastGroups
- iotwireless:ListMulticastGroupsByFuotaTask
- iotwireless:SendDataToMulticastGroup
- iotwireless:StartBulkAssociateWirelessDeviceWithMulticastGroup
- iotwireless:StartBulkDisassociateWirelessDeviceFromMulticastGroup
- iotwireless:StartFuotaTask
- iotwireless:StartMulticastGroupSession
- iotwireless:UpdateFuotaTask
- iotwireless:UpdateMulticastGroup
- iotwireless:UpdateResourceEventConfiguration
- securityhub:CreateFindingAggregator
- securityhub:DeleteFindingAggregator
- securityhub:GetFindingAggregator
- securityhub:ListFindingAggregators
- securityhub:UpdateFindingAggregator

**New resource types:**

- iotwireless:FuotaTask
- iotwireless:MulticastGroup
- securityhub:finding-aggregator

**New actions:**

- lex:ListAggregatedUtterances
- outposts:CreateOrder
- workmail:DeleteMobileDeviceAccessOverride
- workmail:DeregisterMailDomain
- workmail:GetMailDomain
- workmail:GetMobileDeviceAccessOverride
- workmail:ListMailDomains
- workmail:ListMobileDeviceAccessOverrides
- workmail:PutMobileDeviceAccessOverride
- workmail:RegisterMailDomain
- workmail:UpdateDefaultMailDomain

**Updated action access level:**

- workmail:ListAccessControlRules: List -> Read
- workmail:ListMobileDeviceAccessRules: List -> Read