{
  "associatekmskey": {
    "name": "AssociateKmsKey",
    "description": "Grants permission to associate the specified AWS Key Management Service (AWS KMS) customer master key (CMK) with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associatesourcetos3tableintegration": {
    "name": "AssociateSourceToS3TableIntegration",
    "description": "Grants permission to associate a log source to an S3 Tables integration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "callwithbearertoken": {
    "name": "CallWithBearerToken",
    "isPermissionOnly": true,
    "description": "Grants permission to authenticate requests using bearer token",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "cancelexporttask": {
    "name": "CancelExportTask",
    "description": "Grants permission to cancel an export task if it is in PENDING or RUNNING state",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "cancelimporttask": {
    "name": "CancelImportTask",
    "description": "Grants permission to cancel an import from CloudTrail Lake to CloudWatch",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createdelivery": {
    "name": "CreateDelivery",
    "description": "Grants permission to create a delivery connecting a delivery source to a delivery destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createexporttask": {
    "name": "CreateExportTask",
    "description": "Grants permission to create an ExportTask which allows you to efficiently export data from a Log Group to your Amazon S3 bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createimporttask": {
    "name": "CreateImportTask",
    "description": "Grants permission to start an asynchronous process to import data from a CloudTrail Lake event data store into a managed log group in CloudWatch",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createloganomalydetector": {
    "name": "CreateLogAnomalyDetector",
    "description": "Grants permission to create a log anomaly detector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createlogdelivery": {
    "name": "CreateLogDelivery",
    "isPermissionOnly": true,
    "description": "Grants permission to create the log delivery",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createloggroup": {
    "name": "CreateLogGroup",
    "description": "Grants permission to create a new log group with the specified name",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createlogstream": {
    "name": "CreateLogStream",
    "description": "Grants permission to create a new log stream with the specified name",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-stream",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createlookuptable": {
    "name": "CreateLookupTable",
    "description": "Grants permission to create a lookup table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "lookup-table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createscheduledquery": {
    "name": "CreateScheduledQuery",
    "description": "Grants permission to create a scheduled query",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "scheduled-query",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleteaccountpolicy": {
    "name": "DeleteAccountPolicy",
    "description": "Grants permission to delete an account policy",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedataprotectionpolicy": {
    "name": "DeleteDataProtectionPolicy",
    "description": "Grants permission to delete a data protection policy attached to a log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedelivery": {
    "name": "DeleteDelivery",
    "description": "Grants permission to delete a delivery",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedeliverydestination": {
    "name": "DeleteDeliveryDestination",
    "description": "Grants permission to delete a delivery destination after all associated deliveries are deleted",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedeliverydestinationpolicy": {
    "name": "DeleteDeliveryDestinationPolicy",
    "description": "Grants permission to delete a delivery destination policy associated with a delivery destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedeliverysource": {
    "name": "DeleteDeliverySource",
    "description": "Grants permission to delete a delivery source after all associated deliveries are deleted",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedestination": {
    "name": "DeleteDestination",
    "description": "Grants permission to delete the destination with the specified name",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteindexpolicy": {
    "name": "DeleteIndexPolicy",
    "description": "Grants permission to delete an index policy attached to a log group",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteintegration": {
    "name": "DeleteIntegration",
    "description": "Grants permission to delete the integration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteloganomalydetector": {
    "name": "DeleteLogAnomalyDetector",
    "description": "Grants permission to delete a log anomaly detector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletelogdelivery": {
    "name": "DeleteLogDelivery",
    "isPermissionOnly": true,
    "description": "Grants permission to delete the log delivery information for specified log delivery",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteloggroup": {
    "name": "DeleteLogGroup",
    "description": "Grants permission to delete the log group with the specified name",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletelogstream": {
    "name": "DeleteLogStream",
    "description": "Grants permission to delete a log stream",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-stream",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletelookuptable": {
    "name": "DeleteLookupTable",
    "description": "Grants permission to delete a lookup table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "lookup-table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletemetricfilter": {
    "name": "DeleteMetricFilter",
    "description": "Grants permission to delete a metric filter associated with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletepipelinerule": {
    "name": "DeletePipelineRule",
    "isPermissionOnly": true,
    "description": "Grants permission to delete telemetry pipeline",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletequerydefinition": {
    "name": "DeleteQueryDefinition",
    "description": "Grants permission to delete a saved CloudWatch Logs Insights query definition",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteresourcepolicy": {
    "name": "DeleteResourcePolicy",
    "description": "Grants permission to delete a resource policy from this account",
    "accessLevel": "Permissions management",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteretentionpolicy": {
    "name": "DeleteRetentionPolicy",
    "description": "Grants permission to delete the retention policy of the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletescheduledquery": {
    "name": "DeleteScheduledQuery",
    "description": "Grants permission to delete a scheduled query",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "scheduled-query",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletesubscriptionfilter": {
    "name": "DeleteSubscriptionFilter",
    "description": "Grants permission to delete a subscription filter associated with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetransformer": {
    "name": "DeleteTransformer",
    "description": "Grants permission to delete a transformer associated with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeaccountpolicies": {
    "name": "DescribeAccountPolicies",
    "description": "Grants permission to retrieve account policies",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeconfigurationtemplates": {
    "name": "DescribeConfigurationTemplates",
    "description": "Grants permission to retrieve a list of configuration templates of available log types",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedeliveries": {
    "name": "DescribeDeliveries",
    "description": "Grants permission to retrieve a list of deliveries an account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedeliverydestinations": {
    "name": "DescribeDeliveryDestinations",
    "description": "Grants permission to retrieve a list of delivery destinations an account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedeliverysources": {
    "name": "DescribeDeliverySources",
    "description": "Grants permission to retrieve a list of delivery sources in an account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedestinations": {
    "name": "DescribeDestinations",
    "description": "Grants permission to return all the destinations that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeexporttasks": {
    "name": "DescribeExportTasks",
    "description": "Grants permission to return all the export tasks that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describefieldindexes": {
    "name": "DescribeFieldIndexes",
    "description": "Grants permission to return all the indexing attributes that are attached with the log groups",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeimporttaskbatches": {
    "name": "DescribeImportTaskBatches",
    "description": "Grants permission to return detailed information about the individual batches within an import task, including status and any error",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeimporttasks": {
    "name": "DescribeImportTasks",
    "description": "Grants permission to return all the import tasks associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeindexpolicies": {
    "name": "DescribeIndexPolicies",
    "description": "Grants permission to return all the index policies that are attached with the log groups",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeloggroups": {
    "name": "DescribeLogGroups",
    "description": "Grants permission to return all the log groups that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describelogstreams": {
    "name": "DescribeLogStreams",
    "description": "Grants permission to return all the log streams that are associated with the specified log group",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describelookuptables": {
    "name": "DescribeLookupTables",
    "description": "Grants permission to return all lookup tables",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describemetricfilters": {
    "name": "DescribeMetricFilters",
    "description": "Grants permission to return all the metrics filters associated with the specified log group",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describequeries": {
    "name": "DescribeQueries",
    "description": "Grants permission to return a list of CloudWatch Logs Insights queries that are scheduled, executing, or have been executed recently in this account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describequerydefinitions": {
    "name": "DescribeQueryDefinitions",
    "description": "Grants permission to return a paginated list of your saved CloudWatch Logs Insights query definitions",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeresourcepolicies": {
    "name": "DescribeResourcePolicies",
    "description": "Grants permission to return all the resource policies in this account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describesubscriptionfilters": {
    "name": "DescribeSubscriptionFilters",
    "description": "Grants permission to return all the subscription filters associated with the specified log group",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatekmskey": {
    "name": "DisassociateKmsKey",
    "description": "Grants permission to disassociate the associated AWS Key Management Service (AWS KMS) customer master key (CMK) from the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatesourcefroms3tableintegration": {
    "name": "DisassociateSourceFromS3TableIntegration",
    "description": "Grants permission to disassociate a log source from an S3 Tables integration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "filterlogevents": {
    "name": "FilterLogEvents",
    "description": "Grants permission to retrieve log events, optionally filtered by a filter pattern from the specified log group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdataprotectionpolicy": {
    "name": "GetDataProtectionPolicy",
    "description": "Grants permission to retrieve a data protection policy attached to a log group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdelivery": {
    "name": "GetDelivery",
    "description": "Grants permission to retrieve a single delivery",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "delivery",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdeliverydestination": {
    "name": "GetDeliveryDestination",
    "description": "Grants permission to retrieve a single delivery destination",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdeliverydestinationpolicy": {
    "name": "GetDeliveryDestinationPolicy",
    "description": "Grants permission to retrieve a delivery destination policy attached to a delivery destination",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdeliverysource": {
    "name": "GetDeliverySource",
    "description": "Grants permission to retrieve a single delivery source",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "delivery-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getintegration": {
    "name": "GetIntegration",
    "description": "Grants permission to retrieve a single integration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getloganomalydetector": {
    "name": "GetLogAnomalyDetector",
    "description": "Grants permission to get a log anomaly detector",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlogdelivery": {
    "name": "GetLogDelivery",
    "isPermissionOnly": true,
    "description": "Grants permission to get the log delivery information for specified log delivery",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlogevents": {
    "name": "GetLogEvents",
    "description": "Grants permission to retrieve log events from the specified log stream",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-stream",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlogfields": {
    "name": "GetLogFields",
    "description": "Grants permission to retrieve a list of log fields for a data source",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getloggroupfields": {
    "name": "GetLogGroupFields",
    "description": "Grants permission to return a list of the fields that are included in log events in the specified log group, along with the percentage of log events that contain each field",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlogrecord": {
    "name": "GetLogRecord",
    "description": "Grants permission to retrieve all the fields and values of a single log event",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlookuptable": {
    "name": "GetLookupTable",
    "description": "Grants permission to retrieve a lookup table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "lookup-table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getqueryresults": {
    "name": "GetQueryResults",
    "description": "Grants permission to return the results from the specified query",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getscheduledquery": {
    "name": "GetScheduledQuery",
    "description": "Grants permission to retrieve information about a specified scheduled query",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "scheduled-query",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getscheduledqueryhistory": {
    "name": "GetScheduledQueryHistory",
    "description": "Grants permission to return the execution history for a specified scheduled query",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "scheduled-query",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettransformer": {
    "name": "GetTransformer",
    "description": "Grants permission to return transformer associated with the specified log group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "integratewiths3table": {
    "name": "IntegrateWithS3Table",
    "isPermissionOnly": true,
    "description": "Grants permission to deliver log events to S3 Tables",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "logs:data_source_name",
      "logs:data_source_type"
    ],
    "dependentActions": []
  },
  "link": {
    "name": "Link",
    "isPermissionOnly": true,
    "description": "Grants permission to share CloudWatch resources with a monitoring account",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listaggregateloggroupsummaries": {
    "name": "ListAggregateLogGroupSummaries",
    "description": "Grants permission to return an aggregate summary of all log groups in the region grouped by specified data-source characteristics",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listanomalies": {
    "name": "ListAnomalies",
    "description": "Grants permission to list all anomalies detected in the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listentitiesforloggroup": {
    "name": "ListEntitiesForLogGroup",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve all the entities that are associated with log group",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listintegrations": {
    "name": "ListIntegrations",
    "description": "Grants permission to list all integrations associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listloganomalydetectors": {
    "name": "ListLogAnomalyDetectors",
    "description": "Grants permission to return all the anomaly detectors that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listlogdeliveries": {
    "name": "ListLogDeliveries",
    "isPermissionOnly": true,
    "description": "Grants permission to list all the log deliveries for specified account and/or log source",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listloggroups": {
    "name": "ListLogGroups",
    "description": "Grants permission to return all the log groups that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listloggroupsforentity": {
    "name": "ListLogGroupsForEntity",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve all the log groups that are associated with entity",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listloggroupsforquery": {
    "name": "ListLogGroupsForQuery",
    "description": "Grants permission to return all the log groups that are associated with the specified query",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listscheduledqueries": {
    "name": "ListScheduledQueries",
    "description": "Grants permission to return all scheduled queries that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsourcesfors3tableintegration": {
    "name": "ListSourcesForS3TableIntegration",
    "description": "Grants permission to return all log sources associated with an S3 Tables integration",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list the tags for the specified resource",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "log-group",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "lookup-table",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsloggroup": {
    "name": "ListTagsLogGroup",
    "description": "Grants permission to list the tags for the specified log group",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "processwithpipeline": {
    "name": "ProcessWithPipeline",
    "isPermissionOnly": true,
    "description": "Grants permission to process and transform log events through pipeline transformers before storage",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "logs:data_source_name",
      "logs:data_source_type"
    ],
    "dependentActions": []
  },
  "putaccountpolicy": {
    "name": "PutAccountPolicy",
    "description": "Grants permission to attach an account policy",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putbearertokenauthentication": {
    "name": "PutBearerTokenAuthentication",
    "description": "Grants permission to enable or disable bearer token based authentication for the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putdataprotectionpolicy": {
    "name": "PutDataProtectionPolicy",
    "description": "Grants permission to attach a data protection policy to detect and redact sensitive information from log events",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putdeliverydestination": {
    "name": "PutDeliveryDestination",
    "description": "Grants permission to create/update a delivery destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "logs:DeliveryDestinationResourceArn"
    ],
    "dependentActions": []
  },
  "putdeliverydestinationpolicy": {
    "name": "PutDeliveryDestinationPolicy",
    "description": "Grants permission to attach a delivery destination policy to a delivery destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putdeliverysource": {
    "name": "PutDeliverySource",
    "description": "Grants permission to create/update a delivery source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "logs:LogGeneratingResourceArns"
    ],
    "dependentActions": []
  },
  "putdestination": {
    "name": "PutDestination",
    "description": "Grants permission to create or update a Destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "iam:PassRole"
        ]
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "putdestinationpolicy": {
    "name": "PutDestinationPolicy",
    "description": "Grants permission to create or update an access policy associated with an existing Destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putindexpolicy": {
    "name": "PutIndexPolicy",
    "description": "Grants permission to attach an index policy at log group level to optimize search and query",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putintegration": {
    "name": "PutIntegration",
    "description": "Grants permission to create integration between cloudwatch logs and opensearch",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putlogevents": {
    "name": "PutLogEvents",
    "description": "Grants permission to upload a batch of log events to the specified log stream",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-stream",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putloggroupdeletionprotection": {
    "name": "PutLogGroupDeletionProtection",
    "description": "Grants permission to enable or disable deletion protection for the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putmetricfilter": {
    "name": "PutMetricFilter",
    "description": "Grants permission to create or update a metric filter and associates it with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putpipelinerule": {
    "name": "PutPipelineRule",
    "isPermissionOnly": true,
    "description": "Grants permission to create telemetry pipeline",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putquerydefinition": {
    "name": "PutQueryDefinition",
    "description": "Grants permission to create or update a query definition",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putresourcepolicy": {
    "name": "PutResourcePolicy",
    "description": "Grants permission to create or update a resource policy allowing other AWS services to put log events to this account",
    "accessLevel": "Permissions management",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putretentionpolicy": {
    "name": "PutRetentionPolicy",
    "description": "Grants permission to set the retention of the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putsubscriptionfilter": {
    "name": "PutSubscriptionFilter",
    "description": "Grants permission to create or update a subscription filter and associates it with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "iam:PassRole"
        ]
      },
      {
        "name": "destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "puttransformer": {
    "name": "PutTransformer",
    "description": "Grants permission to create or update a transformer and associates it with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startlivetail": {
    "name": "StartLiveTail",
    "description": "Grants permission to start a Live Tail session in CloudWatch Logs",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startquery": {
    "name": "StartQuery",
    "description": "Grants permission to schedule a query of a log group using CloudWatch Logs Insights",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stoplivetail": {
    "name": "StopLiveTail",
    "isPermissionOnly": true,
    "description": "Grants permission to stop a Live Tail session that is in progress",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stopquery": {
    "name": "StopQuery",
    "description": "Grants permission to stop a CloudWatch Logs Insights query that is in progress",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagloggroup": {
    "name": "TagLogGroup",
    "description": "Grants permission to add or update the specified tags for the specified log group",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to add or update the specified tags for the specified resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "log-group",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "lookup-table",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "scheduled-query",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "testmetricfilter": {
    "name": "TestMetricFilter",
    "description": "Grants permission to test the filter pattern of a metric filter against a sample of log event messages",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "testtransformer": {
    "name": "TestTransformer",
    "description": "Grants permission to test the transformer against a sample of log event messages",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "unmask": {
    "name": "Unmask",
    "isPermissionOnly": true,
    "description": "Grants permission to fetch unmasked log events that have been redacted with a data protection policy",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "untagloggroup": {
    "name": "UntagLogGroup",
    "description": "Grants permission to remove the specified tags from the specified log group",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove the specified tags from the specified resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "log-group",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "lookup-table",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "scheduled-query",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateanomaly": {
    "name": "UpdateAnomaly",
    "description": "Grants permission to update an anomaly reported by a log anomaly detector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatedeliveryconfiguration": {
    "name": "UpdateDeliveryConfiguration",
    "description": "Grants permission to update configuration related to a delivery",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateloganomalydetector": {
    "name": "UpdateLogAnomalyDetector",
    "description": "Grants permission to update a log anomaly detector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatelogdelivery": {
    "name": "UpdateLogDelivery",
    "isPermissionOnly": true,
    "description": "Grants permission to update the log delivery information for specified log delivery",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatelookuptable": {
    "name": "UpdateLookupTable",
    "description": "Grants permission to update a lookup table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "lookup-table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatescheduledquery": {
    "name": "UpdateScheduledQuery",
    "description": "Grants permission to update a scheduled query",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "scheduled-query",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}