{
  "bulkpublish": {
    "name": "BulkPublish",
    "description": "Grants permission to initiate a bulk publish of all existing datasets for an Identity Pool to the configured stream",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "identitypool",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedataset": {
    "name": "DeleteDataset",
    "description": "Grants permission to delete a specific dataset",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedataset": {
    "name": "DescribeDataset",
    "description": "Grants permission to get metadata about a dataset by identity and dataset name",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeidentitypoolusage": {
    "name": "DescribeIdentityPoolUsage",
    "description": "Grants permission to get usage details (for example, data storage) about a particular identity pool",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "identitypool",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeidentityusage": {
    "name": "DescribeIdentityUsage",
    "description": "Grants permission to get usage information for an identity, including number of datasets and data usage",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "identity",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getbulkpublishdetails": {
    "name": "GetBulkPublishDetails",
    "description": "Grants permission to get the status of the last BulkPublish operation for an identity pool",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "identitypool",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcognitoevents": {
    "name": "GetCognitoEvents",
    "description": "Grants permission to get the events and the corresponding Lambda functions associated with an identity pool",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "identitypool",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getidentitypoolconfiguration": {
    "name": "GetIdentityPoolConfiguration",
    "description": "Grants permission to get the configuration settings of an identity pool",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "identitypool",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listdatasets": {
    "name": "ListDatasets",
    "description": "Grants permission to list datasets for an identity",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listidentitypoolusage": {
    "name": "ListIdentityPoolUsage",
    "description": "Grants permission to get a list of identity pools registered with Cognito",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "identitypool",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listrecords": {
    "name": "ListRecords",
    "description": "Grants permission to get paginated records, optionally changed after a particular sync count for a dataset and identity",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "queryrecords": {
    "name": "QueryRecords",
    "isPermissionOnly": true,
    "description": "Grants permission to query records",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "registerdevice": {
    "name": "RegisterDevice",
    "description": "Grants permission to register a device to receive push sync notifications",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "identity",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "setcognitoevents": {
    "name": "SetCognitoEvents",
    "description": "Grants permission to set the AWS Lambda function for a given event type for an identity pool",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "identitypool",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "setdatasetconfiguration": {
    "name": "SetDatasetConfiguration",
    "isPermissionOnly": true,
    "description": "Grants permission to configure datasets",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "setidentitypoolconfiguration": {
    "name": "SetIdentityPoolConfiguration",
    "description": "Grants permission to set the necessary configuration for push sync",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "identitypool",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "subscribetodataset": {
    "name": "SubscribeToDataset",
    "description": "Grants permission to subscribe to receive notifications when a dataset is modified by another device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "unsubscribefromdataset": {
    "name": "UnsubscribeFromDataset",
    "description": "Grants permission to unsubscribe from receiving notifications when a dataset is modified by another device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updaterecords": {
    "name": "UpdateRecords",
    "description": "Grants permission to post updates to records and add and delete records for a dataset and user",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}