{
  "archiveagent": {
    "name": "ArchiveAgent",
    "description": "Grants permission to archive a managed agent",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "archiveenvironment": {
    "name": "ArchiveEnvironment",
    "description": "Grants permission to archive a managed agent environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "archivememorystore": {
    "name": "ArchiveMemoryStore",
    "description": "Grants permission to archive a memory store",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "archivesession": {
    "name": "ArchiveSession",
    "description": "Grants permission to archive a managed agent session",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "archivevault": {
    "name": "ArchiveVault",
    "description": "Grants permission to archive a credential vault",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "archiveworkspace": {
    "name": "ArchiveWorkspace",
    "description": "Grants permission to archive a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "assumeconsole": {
    "name": "AssumeConsole",
    "description": "Grants permission to assume console access on Claude Platform",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws-external-anthropic:Capability"
    ],
    "dependentActions": []
  },
  "callwithbearertoken": {
    "name": "CallWithBearerToken",
    "isPermissionOnly": true,
    "description": "Grants permission to make API calls using bearer token authentication",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [
      "aws-external-anthropic:BearerTokenType"
    ],
    "dependentActions": []
  },
  "cancelbatchinference": {
    "name": "CancelBatchInference",
    "description": "Grants permission to cancel an in-progress batch inference request",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "counttokens": {
    "name": "CountTokens",
    "description": "Grants permission to count tokens for a message request",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createagent": {
    "name": "CreateAgent",
    "description": "Grants permission to create a managed agent in a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createbatchinference": {
    "name": "CreateBatchInference",
    "description": "Grants permission to create a batch inference request",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createenvironment": {
    "name": "CreateEnvironment",
    "description": "Grants permission to create a managed agent environment in a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createfile": {
    "name": "CreateFile",
    "description": "Grants permission to upload a file to a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createinference": {
    "name": "CreateInference",
    "description": "Grants permission to create a chat completion inference request",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "creatememorystore": {
    "name": "CreateMemoryStore",
    "description": "Grants permission to create a managed agent memory store in a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createsession": {
    "name": "CreateSession",
    "description": "Grants permission to create a managed agent session in a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createskill": {
    "name": "CreateSkill",
    "description": "Grants permission to create a skill in a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createuserprofile": {
    "name": "CreateUserProfile",
    "description": "Grants permission to create a user profile in a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createuserprofileenrollmenturl": {
    "name": "CreateUserProfileEnrollmentUrl",
    "description": "Grants permission to create an enrollment URL for a user profile",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createvault": {
    "name": "CreateVault",
    "description": "Grants permission to create a managed agent credential vault in a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createworkspace": {
    "name": "CreateWorkspace",
    "description": "Grants permission to create a workspace in an organization",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deletebatchinference": {
    "name": "DeleteBatchInference",
    "description": "Grants permission to delete a batch inference request",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleteenvironment": {
    "name": "DeleteEnvironment",
    "description": "Grants permission to delete a managed agent environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deletefile": {
    "name": "DeleteFile",
    "description": "Grants permission to delete a file from a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deletememorystore": {
    "name": "DeleteMemoryStore",
    "description": "Grants permission to delete a memory store",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deletesession": {
    "name": "DeleteSession",
    "description": "Grants permission to delete a managed agent session",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleteskill": {
    "name": "DeleteSkill",
    "description": "Grants permission to delete a skill from a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deletevault": {
    "name": "DeleteVault",
    "description": "Grants permission to delete a credential vault",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getaccountstatus": {
    "name": "GetAccountStatus",
    "description": "Grants permission to retrieve the status of account setup and AWS Marketplace registration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getagent": {
    "name": "GetAgent",
    "description": "Grants permission to retrieve details or versions of a managed agent",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getbatchinference": {
    "name": "GetBatchInference",
    "description": "Grants permission to retrieve details of a batch inference request",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getenvironment": {
    "name": "GetEnvironment",
    "description": "Grants permission to retrieve details of a managed agent environment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getfile": {
    "name": "GetFile",
    "description": "Grants permission to retrieve a file or its content from a workspace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getmemorystore": {
    "name": "GetMemoryStore",
    "description": "Grants permission to retrieve details of a memory store, its memories, or its memory versions",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getmodel": {
    "name": "GetModel",
    "description": "Grants permission to retrieve information about a specific model",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getsession": {
    "name": "GetSession",
    "description": "Grants permission to retrieve details, events, or resources of a managed agent session",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getskill": {
    "name": "GetSkill",
    "description": "Grants permission to retrieve details of a skill or its versions",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getuserprofile": {
    "name": "GetUserProfile",
    "description": "Grants permission to retrieve details of a user profile",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getvault": {
    "name": "GetVault",
    "description": "Grants permission to retrieve details of a credential vault or its credentials",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getworkspace": {
    "name": "GetWorkspace",
    "description": "Grants permission to retrieve details of a workspace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listagents": {
    "name": "ListAgents",
    "description": "Grants permission to list managed agents in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listbatchinferences": {
    "name": "ListBatchInferences",
    "description": "Grants permission to list batch inference requests in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listenvironments": {
    "name": "ListEnvironments",
    "description": "Grants permission to list managed agent environments in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listfiles": {
    "name": "ListFiles",
    "description": "Grants permission to list files in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listmemorystores": {
    "name": "ListMemoryStores",
    "description": "Grants permission to list managed agent memory stores in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listmodels": {
    "name": "ListModels",
    "description": "Grants permission to list available models in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listsessions": {
    "name": "ListSessions",
    "description": "Grants permission to list managed agent sessions in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listskills": {
    "name": "ListSkills",
    "description": "Grants permission to list skills in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list tags for a resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listuserprofiles": {
    "name": "ListUserProfiles",
    "description": "Grants permission to list user profiles in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listvaults": {
    "name": "ListVaults",
    "description": "Grants permission to list managed agent credential vaults in a workspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listworkspaces": {
    "name": "ListWorkspaces",
    "description": "Grants permission to list workspaces in an organization",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateagent": {
    "name": "UpdateAgent",
    "description": "Grants permission to update a managed agent",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateenvironment": {
    "name": "UpdateEnvironment",
    "description": "Grants permission to update a managed agent environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatememorystore": {
    "name": "UpdateMemoryStore",
    "description": "Grants permission to update a memory store, mutate its memories, or redact a memory version",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatesession": {
    "name": "UpdateSession",
    "description": "Grants permission to update a managed agent session, append session events, or manage its resources",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateskill": {
    "name": "UpdateSkill",
    "description": "Grants permission to create or delete a skill version",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateuserprofile": {
    "name": "UpdateUserProfile",
    "description": "Grants permission to update a user profile in a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatevault": {
    "name": "UpdateVault",
    "description": "Grants permission to update a credential vault or manage its stored credentials",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateworkspace": {
    "name": "UpdateWorkspace",
    "description": "Grants permission to update a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  }
}