{
  "activatepipeline": {
    "name": "ActivatePipeline",
    "description": "Grants permission to validate the specified pipeline and starts processing pipeline tasks. If the pipeline does not pass validation, activation fails",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}",
      "datapipeline:workerGroup"
    ],
    "dependentActions": []
  },
  "addtags": {
    "name": "AddTags",
    "description": "Grants permission to add or modify tags for the specified pipeline",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}",
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createpipeline": {
    "name": "CreatePipeline",
    "description": "Grants permission to create a new, empty pipeline",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "datapipeline:Tag/${TagKey}"
    ],
    "dependentActions": [
      "datapipeline:AddTags"
    ]
  },
  "deactivatepipeline": {
    "name": "DeactivatePipeline",
    "description": "Grants permission to Deactivate the specified running pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}",
      "datapipeline:workerGroup"
    ],
    "dependentActions": []
  },
  "deletepipeline": {
    "name": "DeletePipeline",
    "description": "Grants permission to delete a pipeline, its pipeline definition, and its run history",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describeobjects": {
    "name": "DescribeObjects",
    "description": "Grants permission to get the object definitions for a set of objects associated with the pipeline",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describepipelines": {
    "name": "DescribePipelines",
    "description": "Grants permission to retrieves metadata about one or more pipelines",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}"
    ],
    "dependentActions": []
  },
  "evaluateexpression": {
    "name": "EvaluateExpression",
    "description": "Grants permission to task runners to call EvaluateExpression, to evaluate a string in the context of the specified object",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getaccountlimits": {
    "name": "GetAccountLimits",
    "isPermissionOnly": true,
    "description": "Grants permission to call GetAccountLimits",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getpipelinedefinition": {
    "name": "GetPipelineDefinition",
    "description": "Grants permission to gets the definition of the specified pipeline",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}",
      "datapipeline:workerGroup"
    ],
    "dependentActions": []
  },
  "listpipelines": {
    "name": "ListPipelines",
    "description": "Grants permission to list the pipeline identifiers for all active pipelines that you have permission to access",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "pollfortask": {
    "name": "PollForTask",
    "description": "Grants permission to task runners to call PollForTask, to receive a task to perform from AWS Data Pipeline",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "datapipeline:workerGroup"
    ],
    "dependentActions": []
  },
  "putaccountlimits": {
    "name": "PutAccountLimits",
    "isPermissionOnly": true,
    "description": "Grants permission to call PutAccountLimits",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putpipelinedefinition": {
    "name": "PutPipelineDefinition",
    "description": "Grants permission to add tasks, schedules, and preconditions to the specified pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}",
      "datapipeline:workerGroup"
    ],
    "dependentActions": []
  },
  "queryobjects": {
    "name": "QueryObjects",
    "description": "Grants permission to query the specified pipeline for the names of objects that match the specified set of conditions",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}"
    ],
    "dependentActions": []
  },
  "removetags": {
    "name": "RemoveTags",
    "description": "Grants permission to remove existing tags from the specified pipeline",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}",
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "reporttaskprogress": {
    "name": "ReportTaskProgress",
    "description": "Grants permission to task runners to call ReportTaskProgress, when they are assigned a task to acknowledge that it has the task",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "reporttaskrunnerheartbeat": {
    "name": "ReportTaskRunnerHeartbeat",
    "description": "Grants permission to task runners to call ReportTaskRunnerHeartbeat every 15 minutes to indicate that they are operational",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "setstatus": {
    "name": "SetStatus",
    "description": "Grants permission to requests that the status of the specified physical or logical pipeline objects be updated in the specified pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}"
    ],
    "dependentActions": []
  },
  "settaskstatus": {
    "name": "SetTaskStatus",
    "description": "Grants permission to task runners to call SetTaskStatus to notify AWS Data Pipeline that a task is completed and provide information about the final status",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "validatepipelinedefinition": {
    "name": "ValidatePipelineDefinition",
    "description": "Grants permission to validate the specified pipeline definition to ensure that it is well formed and can be run without error",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "pipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "datapipeline:PipelineCreator",
      "datapipeline:Tag/${TagKey}",
      "datapipeline:workerGroup"
    ],
    "dependentActions": []
  }
}