Iam-floyd

**New actions:**

- opsworks-cm:ListTagsForResource
- opsworks-cm:TagResource
- opsworks-cm:UntagResource
- sso:SearchGroups
- sso:SearchUsers

**Updated action access level:**

- ecr:ListTagsForResource: Read -> List

**New conditions:**

- sagemaker:AppNetworkAccessType

**New actions:**

- medialive:CreateMultiplexProgram
- medialive:DeleteMultiplexProgram
- medialive:DescribeMultiplexProgram
- medialive:ListMultiplexPrograms
- medialive:UpdateMultiplexProgram

**Updated action access level:**

- medialive:CreateChannel: Tagging -> Write
- medialive:CreateInput: Tagging -> Write
- medialive:CreateInputSecurityGroup: Tagging -> Write
- medialive:CreateMultiplex: Tagging -> Write
- medialive:PurchaseOffering: Tagging -> Write

**New actions:**

- quicksight:CreateAccountCustomization
- quicksight:CreateCustomPermissions
- quicksight:CreateNamespace
- quicksight:DeleteAccountCustomization
- quicksight:DeleteNamespace
- quicksight:DescribeAccountCustomization
- quicksight:DescribeAccountSettings
- quicksight:DescribeCustomPermissions
- quicksight:DescribeNamespace
- quicksight:GetSessionEmbedUrl
- quicksight:ListCustomPermissions
- quicksight:ListNamespaces
- quicksight:UpdateAccountCustomization
- quicksight:UpdateAccountSettings
- quicksight:UpdateCustomPermissions
- rekognition:DetectProtectiveEquipment
- s3:DeleteBucketOwnershipControls
- s3:GetBucketOwnershipControls
- s3:PutBucketOwnershipControls
- budgets:CreateBudgetAction
- budgets:DeleteBudgetAction
- budgets:DescribeBudgetAction
- budgets:DescribeBudgetActionHistories
- budgets:DescribeBudgetActionsForAccount
- budgets:DescribeBudgetActionsForBudget
- budgets:ExecuteBudgetAction
- budgets:UpdateBudgetAction
- codestar-connections:CreateHost
- codestar-connections:DeleteHost
- codestar-connections:GetHost
- codestar-connections:ListHosts
- codestar-connections:RegisterAppCode
- codestar-connections:StartAppRegistrationHandshake

**Updated action access level:**

- s3:ListBucketMultipartUploads: Read -> List
- s3:ListBucketVersions: Read -> List
- s3:ListJobs: Read -> List
- s3:ListMultipartUploadParts: Read -> List

**New resource types:**

- quicksight:customization
- quicksight:namespace
- budgets:budgetAction
- codestar-connections:host

**New conditions:**

- codestar-connections:HostArn
- iot:DomainName

**New actions:**

- appsync:SetWebACL

**Updated action access level:**

- sso:ListAccountAssignmentCreationStatus: Read -> List
- sso:ListAccountAssignmentDeletionStatus: Read -> List
- sso:ListAccountAssignments: Read -> List
- sso:ListAccountsForProvisionedPermissionSet: Read -> List
- sso:ListApplicationInstanceCertificates: Read -> List
- sso:ListApplicationTemplates: Read -> List
- sso:ListApplications: Read -> List
- sso:ListDirectoryAssociations: Read -> List
- sso:ListInstances: Read -> List
- sso:ListManagedPoliciesInPermissionSet: Read -> List
- sso:ListPermissionSetProvisioningStatus: Read -> List
- sso:ListPermissionSets: Read -> List
- sso:ListPermissionSetsProvisionedToAccount: Read -> List
- sso:ListProfileAssociations: Read -> List
- sso:ListProfiles: Read -> List
- sso:ListTagsForResource: Read -> List

**New resource types:**

- appsync:appsync

**New actions:**

- elasticache:CreateUser
- elasticache:CreateUserGroup
- elasticache:DeleteUser
- elasticache:DeleteUserGroup
- elasticache:DescribeUserGroups
- elasticache:DescribeUsers
- elasticache:ModifyUser
- elasticache:ModifyUserGroup
- batch:ListTagsForResource
- batch:TagResource
- batch:UntagResource

**Updated action access level:**

- glue:BatchDeleteTableVersion: Read -> Write
- glue:DeleteTableVersion: Read -> Write

**New resource types:**

- elasticache:user
- elasticache:usergroup
- batch:job