{
  "batchdeletebuilds": {
    "name": "BatchDeleteBuilds",
    "description": "Grants permission to delete one or more builds",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetbuildbatches": {
    "name": "BatchGetBuildBatches",
    "description": "Grants permission to get information about one or more build batches",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetbuilds": {
    "name": "BatchGetBuilds",
    "description": "Grants permission to get information about one or more builds",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetcommandexecutions": {
    "name": "BatchGetCommandExecutions",
    "description": "Grants permission to get information about one or more command executions",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "sandbox",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetfleets": {
    "name": "BatchGetFleets",
    "description": "Grants permission to return an array of the Fleet objects specified by the input parameter",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "fleet",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetprojects": {
    "name": "BatchGetProjects",
    "description": "Grants permission to get information about one or more build projects",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetreportgroups": {
    "name": "BatchGetReportGroups",
    "description": "Grants permission to return an array of ReportGroup objects that are specified by the input reportGroupArns parameter",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetreports": {
    "name": "BatchGetReports",
    "description": "Grants permission to return an array of the Report objects specified by the input reportArns parameter",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetsandboxes": {
    "name": "BatchGetSandboxes",
    "description": "Grants permission to get information about one or more sandboxes",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchputcodecoverages": {
    "name": "BatchPutCodeCoverages",
    "isPermissionOnly": true,
    "description": "Grants permission to add or update information about a report",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchputtestcases": {
    "name": "BatchPutTestCases",
    "isPermissionOnly": true,
    "description": "Grants permission to add or update information about a report",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createfleet": {
    "name": "CreateFleet",
    "description": "Grants permission to create a compute fleet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "fleet",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "codebuild:imageId",
      "codebuild:computeType",
      "codebuild:vpcConfig",
      "codebuild:vpcConfig.vpcId",
      "codebuild:vpcConfig.securityGroupIds",
      "codebuild:vpcConfig.subnets",
      "codebuild:computeConfiguration",
      "codebuild:computeConfiguration.disk",
      "codebuild:computeConfiguration.instanceType",
      "codebuild:computeConfiguration.machineType",
      "codebuild:computeConfiguration.memory",
      "codebuild:computeConfiguration.vCpu",
      "codebuild:environmentType",
      "codebuild:fleetServiceRole"
    ],
    "dependentActions": []
  },
  "createproject": {
    "name": "CreateProject",
    "description": "Grants permission to create a build project",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "codebuild:autoRetryLimit",
      "codebuild:concurrentBuildLimit",
      "codebuild:artifacts",
      "codebuild:artifacts.bucketOwnerAccess",
      "codebuild:artifacts.encryptionDisabled",
      "codebuild:artifacts.location",
      "codebuild:secondaryArtifacts",
      "codebuild:secondaryArtifacts.artifactIdentifier",
      "codebuild:secondaryArtifacts.bucketOwnerAccess",
      "codebuild:secondaryArtifacts.encryptionDisabled",
      "codebuild:secondaryArtifacts.location",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
      "codebuild:source",
      "codebuild:source.buildStatusConfig.targetUrl",
      "codebuild:source.buildStatusConfig.context",
      "codebuild:source.location",
      "codebuild:source.insecureSsl",
      "codebuild:source.buildspec",
      "codebuild:source.auth.resource",
      "codebuild:source.auth.type",
      "codebuild:secondarySources",
      "codebuild:secondarySources.sourceIdentifier",
      "codebuild:secondarySources.buildStatusConfig.targetUrl",
      "codebuild:secondarySources.buildStatusConfig.context",
      "codebuild:secondarySources.location",
      "codebuild:secondarySources.auth.resource",
      "codebuild:secondarySources.auth.type",
      "codebuild:secondarySources.buildspec",
      "codebuild:secondarySources.insecureSsl",
      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
      "codebuild:secondarySources/${sourceIdentifier}.location",
      "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
      "codebuild:secondarySources/${sourceIdentifier}.auth.type",
      "codebuild:secondarySources/${sourceIdentifier}.buildspec",
      "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
      "codebuild:logsConfig",
      "codebuild:logsConfig.s3Logs",
      "codebuild:logsConfig.s3Logs.bucketOwnerAccess",
      "codebuild:logsConfig.s3Logs.encryptionDisabled",
      "codebuild:logsConfig.s3Logs.location",
      "codebuild:logsConfig.s3Logs.status",
      "codebuild:fileSystemLocations.identifier",
      "codebuild:fileSystemLocations.type",
      "codebuild:fileSystemLocations.location",
      "codebuild:fileSystemLocations/${identifier}.type",
      "codebuild:fileSystemLocations/${identifier}.location",
      "codebuild:buildBatchConfig",
      "codebuild:buildBatchConfig.serviceRole",
      "codebuild:buildBatchConfig.restrictions.computeTypesAllowed",
      "codebuild:buildBatchConfig.restrictions.fleetsAllowed",
      "codebuild:vpcConfig",
      "codebuild:vpcConfig.subnets",
      "codebuild:vpcConfig.vpcId",
      "codebuild:vpcConfig.securityGroupIds",
      "codebuild:environment",
      "codebuild:environment.type",
      "codebuild:environment.fleet.fleetArn",
      "codebuild:environment.computeType",
      "codebuild:environment.image",
      "codebuild:environment.imagePullCredentialsType",
      "codebuild:environment.privilegedMode",
      "codebuild:environment.certificate",
      "codebuild:environment.computeConfiguration",
      "codebuild:environment.computeConfiguration.disk",
      "codebuild:environment.computeConfiguration.instanceType",
      "codebuild:environment.computeConfiguration.machineType",
      "codebuild:environment.computeConfiguration.memory",
      "codebuild:environment.computeConfiguration.vCpu",
      "codebuild:environment.environmentVariables",
      "codebuild:environment.environmentVariables.name",
      "codebuild:environment.environmentVariables.value",
      "codebuild:environment.environmentVariables/${name}.value",
      "codebuild:environment.registryCredential",
      "codebuild:environment.registryCredential.credential",
      "codebuild:environment.registryCredential.credentialProvider",
      "codebuild:encryptionKey",
      "codebuild:cache",
      "codebuild:cache.type",
      "codebuild:cache.location",
      "codebuild:cache.modes",
      "codebuild:serviceRole"
    ],
    "dependentActions": []
  },
  "createreport": {
    "name": "CreateReport",
    "isPermissionOnly": true,
    "description": "Grants permission to create a report. A report is created when tests specified in the buildspec file for a report groups run during the build of a project",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createreportgroup": {
    "name": "CreateReportGroup",
    "description": "Grants permission to create a report group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "codebuild:exportConfig.s3Destination.bucket",
      "codebuild:exportConfig.s3Destination.bucketOwner",
      "codebuild:exportConfig.s3Destination.encryptionKey",
      "codebuild:exportConfig.s3Destination.encryptionDisabled",
      "codebuild:exportConfig.s3Destination.path"
    ],
    "dependentActions": []
  },
  "createwebhook": {
    "name": "CreateWebhook",
    "description": "Grants permission to create webhook. For an existing AWS CodeBuild build project that has its source code stored in a GitHub or Bitbucket repository, enables AWS CodeBuild to start rebuilding the source code every time a code change is pushed to the repository",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "codebuild:buildType",
      "codebuild:manualCreation",
      "codebuild:scopeConfiguration.domain",
      "codebuild:scopeConfiguration.name",
      "codebuild:scopeConfiguration.scope"
    ],
    "dependentActions": []
  },
  "deletebuildbatch": {
    "name": "DeleteBuildBatch",
    "description": "Grants permission to delete a build batch",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletefleet": {
    "name": "DeleteFleet",
    "description": "Grants permission to delete a compute fleet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "fleet",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteoauthtoken": {
    "name": "DeleteOAuthToken",
    "isPermissionOnly": true,
    "description": "Grants permission to delete an OAuth token from a connected third-party OAuth provider. Only used in the AWS CodeBuild console",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteproject": {
    "name": "DeleteProject",
    "description": "Grants permission to delete a build project",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletereport": {
    "name": "DeleteReport",
    "description": "Grants permission to delete a report",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletereportgroup": {
    "name": "DeleteReportGroup",
    "description": "Grants permission to delete a report group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteresourcepolicy": {
    "name": "DeleteResourcePolicy",
    "description": "Grants permission to delete a resource policy for the associated project or report group",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "project",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "report-group",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletesourcecredentials": {
    "name": "DeleteSourceCredentials",
    "description": "Grants permission to delete a set of GitHub, GitHub Enterprise, or Bitbucket source credentials",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletewebhook": {
    "name": "DeleteWebhook",
    "description": "Grants permission to delete webhook. For an existing AWS CodeBuild build project that has its source code stored in a GitHub or Bitbucket repository, stops AWS CodeBuild from rebuilding the source code every time a code change is pushed to the repository",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describecodecoverages": {
    "name": "DescribeCodeCoverages",
    "description": "Grants permission to return an array of CodeCoverage objects",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describetestcases": {
    "name": "DescribeTestCases",
    "description": "Grants permission to return an array of TestCase objects",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getreportgrouptrend": {
    "name": "GetReportGroupTrend",
    "description": "Grants permission to analyze and accumulate test report values for the test reports in the specified report group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getresourcepolicy": {
    "name": "GetResourcePolicy",
    "description": "Grants permission to return a resource policy for the specified project or report group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "project",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "report-group",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "importsourcecredentials": {
    "name": "ImportSourceCredentials",
    "description": "Grants permission to import the source repository credentials for an AWS CodeBuild project that has its source code stored in a GitHub, GitHub Enterprise, or Bitbucket repository",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "codebuild:authType",
      "codebuild:serverType",
      "codebuild:shouldOverwrite",
      "codebuild:token",
      "codebuild:username"
    ],
    "dependentActions": []
  },
  "invalidateprojectcache": {
    "name": "InvalidateProjectCache",
    "description": "Grants permission to reset the cache for a project",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listbuildbatches": {
    "name": "ListBuildBatches",
    "description": "Grants permission to get a list of build batch IDs, with each build batch ID representing a single build batch",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listbuildbatchesforproject": {
    "name": "ListBuildBatchesForProject",
    "description": "Grants permission to get a list of build batch IDs for the specified build project, with each build batch ID representing a single build batch",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listbuilds": {
    "name": "ListBuilds",
    "description": "Grants permission to get a list of build IDs, with each build ID representing a single build",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listbuildsforproject": {
    "name": "ListBuildsForProject",
    "description": "Grants permission to get a list of build IDs for the specified build project, with each build ID representing a single build",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcommandexecutionsforsandbox": {
    "name": "ListCommandExecutionsForSandbox",
    "description": "Grants permission to get a list of command execution IDs for the specified sandbox, with each command execution ID representing a single command execution",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "sandbox",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconnectedoauthaccounts": {
    "name": "ListConnectedOAuthAccounts",
    "isPermissionOnly": true,
    "description": "Grants permission to list connected third-party OAuth providers. Only used in the AWS CodeBuild console",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcuratedenvironmentimages": {
    "name": "ListCuratedEnvironmentImages",
    "description": "Grants permission to get information about Docker images that are managed by AWS CodeBuild",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listfleets": {
    "name": "ListFleets",
    "description": "Grants permission to get a list of compute fleet ARNs, with each compute fleet ARN representing a single fleet",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprojects": {
    "name": "ListProjects",
    "description": "Grants permission to get a list of build project names, with each build project name representing a single build project",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listreportgroups": {
    "name": "ListReportGroups",
    "description": "Grants permission to return a list of report group ARNs. Each report group ARN represents one report group",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listreports": {
    "name": "ListReports",
    "description": "Grants permission to return a list of report ARNs. Each report ARN representing one report",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listreportsforreportgroup": {
    "name": "ListReportsForReportGroup",
    "description": "Grants permission to return a list of report ARNs that belong to the specified report group. Each report ARN represents one report",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listrepositories": {
    "name": "ListRepositories",
    "isPermissionOnly": true,
    "description": "Grants permission to list source code repositories from a connected third-party OAuth provider. Only used in the AWS CodeBuild console",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsandboxes": {
    "name": "ListSandboxes",
    "description": "Grants permission to get a list of sandbox IDs, with each sandbox ID representing a single sandbox",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsandboxesforproject": {
    "name": "ListSandboxesForProject",
    "description": "Grants permission to get a list of sandbox IDs for the specified sandbox project, with each sandbox ID representing a single sandbox",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsharedprojects": {
    "name": "ListSharedProjects",
    "description": "Grants permission to return a list of project ARNs that have been shared with the requester. Each project ARN represents one project",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsharedreportgroups": {
    "name": "ListSharedReportGroups",
    "description": "Grants permission to return a list of report group ARNs that have been shared with the requester. Each report group ARN represents one report group",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsourcecredentials": {
    "name": "ListSourceCredentials",
    "description": "Grants permission to return a list of SourceCredentialsInfo objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "persistoauthtoken": {
    "name": "PersistOAuthToken",
    "isPermissionOnly": true,
    "description": "Grants permission to save an OAuth token from a connected third-party OAuth provider. Only used in the AWS CodeBuild console",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putresourcepolicy": {
    "name": "PutResourcePolicy",
    "description": "Grants permission to create a resource policy for the associated project or report group",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "project",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "report-group",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "retrybuild": {
    "name": "RetryBuild",
    "description": "Grants permission to retry a build",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "retrybuildbatch": {
    "name": "RetryBuildBatch",
    "description": "Grants permission to retry a build batch",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startbuild": {
    "name": "StartBuild",
    "description": "Grants permission to start running a build",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "codebuild:autoRetryLimit",
      "codebuild:artifacts",
      "codebuild:artifacts.bucketOwnerAccess",
      "codebuild:artifacts.encryptionDisabled",
      "codebuild:artifacts.location",
      "codebuild:secondaryArtifacts",
      "codebuild:secondaryArtifacts.artifactIdentifier",
      "codebuild:secondaryArtifacts.bucketOwnerAccess",
      "codebuild:secondaryArtifacts.encryptionDisabled",
      "codebuild:secondaryArtifacts.location",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
      "codebuild:source",
      "codebuild:source.buildStatusConfig.targetUrl",
      "codebuild:source.buildStatusConfig.context",
      "codebuild:source.location",
      "codebuild:source.insecureSsl",
      "codebuild:source.buildspec",
      "codebuild:source.auth.resource",
      "codebuild:source.auth.type",
      "codebuild:secondarySources",
      "codebuild:secondarySources.sourceIdentifier",
      "codebuild:secondarySources.buildStatusConfig.targetUrl",
      "codebuild:secondarySources.buildStatusConfig.context",
      "codebuild:secondarySources.location",
      "codebuild:secondarySources.auth.resource",
      "codebuild:secondarySources.auth.type",
      "codebuild:secondarySources.buildspec",
      "codebuild:secondarySources.insecureSsl",
      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
      "codebuild:secondarySources/${sourceIdentifier}.location",
      "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
      "codebuild:secondarySources/${sourceIdentifier}.auth.type",
      "codebuild:secondarySources/${sourceIdentifier}.buildspec",
      "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
      "codebuild:logsConfig",
      "codebuild:logsConfig.s3Logs",
      "codebuild:logsConfig.s3Logs.bucketOwnerAccess",
      "codebuild:logsConfig.s3Logs.encryptionDisabled",
      "codebuild:logsConfig.s3Logs.location",
      "codebuild:logsConfig.s3Logs.status",
      "codebuild:environment",
      "codebuild:environment.type",
      "codebuild:environment.fleet.fleetArn",
      "codebuild:environment.computeType",
      "codebuild:environment.image",
      "codebuild:environment.imagePullCredentialsType",
      "codebuild:environment.privilegedMode",
      "codebuild:environment.certificate",
      "codebuild:environment.environmentVariables",
      "codebuild:environment.environmentVariables.name",
      "codebuild:environment.environmentVariables.value",
      "codebuild:environment.environmentVariables/${name}.value",
      "codebuild:environment.registryCredential",
      "codebuild:environment.registryCredential.credential",
      "codebuild:environment.registryCredential.credentialProvider",
      "codebuild:encryptionKey",
      "codebuild:cache",
      "codebuild:cache.type",
      "codebuild:cache.location",
      "codebuild:cache.modes",
      "codebuild:serviceRole"
    ],
    "dependentActions": []
  },
  "startbuildbatch": {
    "name": "StartBuildBatch",
    "description": "Grants permission to start running a build batch",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "codebuild:artifacts",
      "codebuild:artifacts.bucketOwnerAccess",
      "codebuild:artifacts.encryptionDisabled",
      "codebuild:artifacts.location",
      "codebuild:secondaryArtifacts",
      "codebuild:secondaryArtifacts.artifactIdentifier",
      "codebuild:secondaryArtifacts.bucketOwnerAccess",
      "codebuild:secondaryArtifacts.encryptionDisabled",
      "codebuild:secondaryArtifacts.location",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
      "codebuild:source",
      "codebuild:source.location",
      "codebuild:source.insecureSsl",
      "codebuild:source.buildspec",
      "codebuild:source.auth.resource",
      "codebuild:source.auth.type",
      "codebuild:secondarySources",
      "codebuild:secondarySources.sourceIdentifier",
      "codebuild:secondarySources.buildStatusConfig.targetUrl",
      "codebuild:secondarySources.buildStatusConfig.context",
      "codebuild:secondarySources.location",
      "codebuild:secondarySources.auth.resource",
      "codebuild:secondarySources.auth.type",
      "codebuild:secondarySources.buildspec",
      "codebuild:secondarySources.insecureSsl",
      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
      "codebuild:secondarySources/${sourceIdentifier}.location",
      "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
      "codebuild:secondarySources/${sourceIdentifier}.auth.type",
      "codebuild:secondarySources/${sourceIdentifier}.buildspec",
      "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
      "codebuild:logsConfig",
      "codebuild:logsConfig.s3Logs",
      "codebuild:logsConfig.s3Logs.bucketOwnerAccess",
      "codebuild:logsConfig.s3Logs.encryptionDisabled",
      "codebuild:logsConfig.s3Logs.location",
      "codebuild:logsConfig.s3Logs.status",
      "codebuild:buildBatchConfig",
      "codebuild:buildBatchConfig.serviceRole",
      "codebuild:buildBatchConfig.restrictions.computeTypesAllowed",
      "codebuild:buildBatchConfig.restrictions.fleetsAllowed",
      "codebuild:environment",
      "codebuild:environment.type",
      "codebuild:environment.computeType",
      "codebuild:environment.image",
      "codebuild:environment.imagePullCredentialsType",
      "codebuild:environment.privilegedMode",
      "codebuild:environment.certificate",
      "codebuild:environment.environmentVariables",
      "codebuild:environment.environmentVariables.name",
      "codebuild:environment.environmentVariables.value",
      "codebuild:environment.environmentVariables/${name}.value",
      "codebuild:environment.registryCredential",
      "codebuild:environment.registryCredential.credential",
      "codebuild:environment.registryCredential.credentialProvider",
      "codebuild:encryptionKey",
      "codebuild:cache",
      "codebuild:cache.type",
      "codebuild:cache.location",
      "codebuild:cache.modes",
      "codebuild:serviceRole"
    ],
    "dependentActions": []
  },
  "startcommandexecution": {
    "name": "StartCommandExecution",
    "description": "Grants permission to start running a command execution",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "sandbox",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startsandbox": {
    "name": "StartSandbox",
    "description": "Grants permission to start running a sandbox",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startsandboxconnection": {
    "name": "StartSandboxConnection",
    "description": "Grants permission to establish a connection to the sandbox",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "sandbox",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stopbuild": {
    "name": "StopBuild",
    "description": "Grants permission to attempt to stop running a build",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stopbuildbatch": {
    "name": "StopBuildBatch",
    "description": "Grants permission to attempt to stop running a build batch",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stopsandbox": {
    "name": "StopSandbox",
    "description": "Grants permission to attempt to stop running a sandbox",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatefleet": {
    "name": "UpdateFleet",
    "description": "Grants permission to change the settings of an existing compute fleet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "fleet",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "codebuild:imageId",
      "codebuild:computeType",
      "codebuild:vpcConfig",
      "codebuild:vpcConfig.vpcId",
      "codebuild:vpcConfig.securityGroupIds",
      "codebuild:vpcConfig.subnets",
      "codebuild:computeConfiguration",
      "codebuild:computeConfiguration.disk",
      "codebuild:computeConfiguration.instanceType",
      "codebuild:computeConfiguration.machineType",
      "codebuild:computeConfiguration.memory",
      "codebuild:computeConfiguration.vCpu",
      "codebuild:environmentType",
      "codebuild:fleetServiceRole"
    ],
    "dependentActions": []
  },
  "updateproject": {
    "name": "UpdateProject",
    "description": "Grants permission to change the settings of an existing build project",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "codebuild:autoRetryLimit",
      "codebuild:concurrentBuildLimit",
      "codebuild:artifacts",
      "codebuild:artifacts.bucketOwnerAccess",
      "codebuild:artifacts.encryptionDisabled",
      "codebuild:artifacts.location",
      "codebuild:secondaryArtifacts",
      "codebuild:secondaryArtifacts.artifactIdentifier",
      "codebuild:secondaryArtifacts.bucketOwnerAccess",
      "codebuild:secondaryArtifacts.encryptionDisabled",
      "codebuild:secondaryArtifacts.location",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
      "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
      "codebuild:source",
      "codebuild:source.buildStatusConfig.targetUrl",
      "codebuild:source.buildStatusConfig.context",
      "codebuild:source.location",
      "codebuild:source.insecureSsl",
      "codebuild:source.buildspec",
      "codebuild:source.auth.resource",
      "codebuild:source.auth.type",
      "codebuild:secondarySources",
      "codebuild:secondarySources.sourceIdentifier",
      "codebuild:secondarySources.buildStatusConfig.targetUrl",
      "codebuild:secondarySources.buildStatusConfig.context",
      "codebuild:secondarySources.location",
      "codebuild:secondarySources.auth.resource",
      "codebuild:secondarySources.auth.type",
      "codebuild:secondarySources.buildspec",
      "codebuild:secondarySources.insecureSsl",
      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
      "codebuild:secondarySources/${sourceIdentifier}.location",
      "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
      "codebuild:secondarySources/${sourceIdentifier}.auth.type",
      "codebuild:secondarySources/${sourceIdentifier}.buildspec",
      "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
      "codebuild:logsConfig",
      "codebuild:logsConfig.s3Logs",
      "codebuild:logsConfig.s3Logs.bucketOwnerAccess",
      "codebuild:logsConfig.s3Logs.encryptionDisabled",
      "codebuild:logsConfig.s3Logs.location",
      "codebuild:logsConfig.s3Logs.status",
      "codebuild:fileSystemLocations.identifier",
      "codebuild:fileSystemLocations.type",
      "codebuild:fileSystemLocations.location",
      "codebuild:fileSystemLocations/${identifier}.type",
      "codebuild:fileSystemLocations/${identifier}.location",
      "codebuild:buildBatchConfig",
      "codebuild:buildBatchConfig.serviceRole",
      "codebuild:buildBatchConfig.restrictions.computeTypesAllowed",
      "codebuild:buildBatchConfig.restrictions.fleetsAllowed",
      "codebuild:vpcConfig",
      "codebuild:vpcConfig.subnets",
      "codebuild:vpcConfig.vpcId",
      "codebuild:vpcConfig.securityGroupIds",
      "codebuild:environment",
      "codebuild:environment.type",
      "codebuild:environment.fleet.fleetArn",
      "codebuild:environment.computeType",
      "codebuild:environment.image",
      "codebuild:environment.imagePullCredentialsType",
      "codebuild:environment.privilegedMode",
      "codebuild:environment.certificate",
      "codebuild:environment.computeConfiguration",
      "codebuild:environment.computeConfiguration.disk",
      "codebuild:environment.computeConfiguration.instanceType",
      "codebuild:environment.computeConfiguration.machineType",
      "codebuild:environment.computeConfiguration.memory",
      "codebuild:environment.computeConfiguration.vCpu",
      "codebuild:environment.environmentVariables",
      "codebuild:environment.environmentVariables.name",
      "codebuild:environment.environmentVariables.value",
      "codebuild:environment.environmentVariables/${name}.value",
      "codebuild:environment.registryCredential",
      "codebuild:environment.registryCredential.credential",
      "codebuild:environment.registryCredential.credentialProvider",
      "codebuild:encryptionKey",
      "codebuild:cache",
      "codebuild:cache.type",
      "codebuild:cache.location",
      "codebuild:cache.modes",
      "codebuild:serviceRole"
    ],
    "dependentActions": []
  },
  "updateprojectvisibility": {
    "name": "UpdateProjectVisibility",
    "description": "Grants permission to change the public visibility of a project and its builds",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "codebuild:projectVisibility"
    ],
    "dependentActions": []
  },
  "updatereport": {
    "name": "UpdateReport",
    "isPermissionOnly": true,
    "description": "Grants permission to update information about a report",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatereportgroup": {
    "name": "UpdateReportGroup",
    "description": "Grants permission to change the settings of an existing report group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "report-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "codebuild:exportConfig.s3Destination.bucket",
      "codebuild:exportConfig.s3Destination.bucketOwner",
      "codebuild:exportConfig.s3Destination.encryptionKey",
      "codebuild:exportConfig.s3Destination.encryptionDisabled",
      "codebuild:exportConfig.s3Destination.path"
    ],
    "dependentActions": []
  },
  "updatewebhook": {
    "name": "UpdateWebhook",
    "description": "Grants permission to update the webhook associated with an AWS CodeBuild build project",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "project",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "codebuild:buildType",
      "codebuild:manualCreation",
      "codebuild:scopeConfiguration.domain",
      "codebuild:scopeConfiguration.name",
      "codebuild:scopeConfiguration.scope"
    ],
    "dependentActions": []
  }
}