Iam-floyd

**New services:**

- kafka-cluster

**New actions:**

- ssm:AssociateOpsItemRelatedItem
- ssm:DisassociateOpsItemRelatedItem
- ssm:ListOpsItemRelatedItems
- workspaces:AssociateConnectionAlias
- workspaces:CopyWorkspaceImage
- workspaces:CreateConnectionAlias
- workspaces:CreateWorkspaceBundle
- workspaces:DeleteConnectionAlias
- workspaces:DeleteWorkspaceBundle
- workspaces:DeregisterWorkspaceDirectory
- workspaces:DescribeConnectionAliasPermissions
- workspaces:DescribeConnectionAliases
- workspaces:DescribeWorkspaceImagePermissions
- workspaces:DescribeWorkspaceSnapshots
- workspaces:DisassociateConnectionAlias
- workspaces:MigrateWorkspace
- workspaces:ModifySelfservicePermissions
- workspaces:ModifyWorkspaceAccessProperties
- workspaces:ModifyWorkspaceCreationProperties
- workspaces:RegisterWorkspaceDirectory
- workspaces:RestoreWorkspace
- workspaces:UpdateConnectionAliasPermission
- workspaces:UpdateWorkspaceBundle
- workspaces:UpdateWorkspaceImagePermission

**Updated action access level:**

- workspaces:DeleteTags: Write -> Tagging
-workspaces:DescribeAccount;List
- workspaces:DescribeAccountModifications: List -> Read
+workspaces:DescribeAccountModifications;Read
- workspaces:DescribeAccountModifications: List -> Read
- workspaces:DescribeIpGroups: List -> Read
- workspaces:DescribeWorkspaceDirectories: List -> Read

**New resource types:**

- workspaces:connectionalias
- workspaces:workspaceimage

**New condition keys:**

- workspaces:RequestTag/${TagKey}
- workspaces:ResourceTag/${TagKey}
- workspaces:TagKeys

**New actions:**

- ecs:ExecuteCommand
- ecs:UpdateCapacityProvider
- ecs:UpdateCluster

**Updated action access level:**

- ecs:ListAccountSettings: List -> Read
- ecs:ListTagsForResource: List -> Read

**New condition keys:**

- ecs:container-name
- ecs:enable-execute-command
- ecs:task

**New actions:**

- chime:ListSupportedPhoneNumberCountries
- opsworks-cm:ExportServerEngineAttribute

**Updated action access level:**

- lambda:TagResource: Write -> Tagging
- lambda:UntagResource: Write -> Tagging
- opsworks-cm:ListTagsForResource: List -> Read

**New resource types:**

- opsworks-cm:backup
- opsworks-cm:server

**New actions:**

- clouddirectory:ListManagedSchemaArns
- dms:DeleteConnection
- dms:MoveReplicationTask
- opsworks:DescribeOperatingSystems

**New global condition context keys:**

- aws:PrincipalIsAWSService
- aws:PrincipalServiceName
- aws:PrincipalServiceNamesList
- aws:SourceIdentity

**New actions:**

- ds:AddRegion
- ds:DescribeRegions
- ds:DisableClientAuthentication
- ds:EnableClientAuthentication
- ds:RemoveRegion