{
  "allowvendedlogdeliveryforresource": {
    "name": "AllowVendedLogDeliveryForResource",
    "isPermissionOnly": true,
    "description": "Grants permission to configure vended log delivery for AWS PCS cluster logs",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createcluster": {
    "name": "CreateCluster",
    "description": "Grants permission to create clusters",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "ec2:CreateNetworkInterface",
      "ec2:CreateNetworkInterfacePermission",
      "ec2:DescribeNetworkInterfaces",
      "ec2:DescribeSecurityGroups",
      "ec2:DescribeSubnets",
      "ec2:DescribeVpcs",
      "ec2:GetSecurityGroupsForVpc",
      "iam:CreateServiceLinkedRole",
      "secretsmanager:CreateSecret",
      "secretsmanager:TagResource"
    ]
  },
  "createcomputenodegroup": {
    "name": "CreateComputeNodeGroup",
    "description": "Grants permission to create compute node groups",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:CreateFleet",
          "ec2:CreateLaunchTemplate",
          "ec2:CreateLaunchTemplateVersion",
          "ec2:CreateTags",
          "ec2:DescribeImages",
          "ec2:DescribeInstanceStatus",
          "ec2:DescribeInstanceTypes",
          "ec2:DescribeInstances",
          "ec2:DescribeLaunchTemplateVersions",
          "ec2:DescribeLaunchTemplates",
          "ec2:DescribeSecurityGroups",
          "ec2:DescribeSubnets",
          "ec2:DescribeVpcs",
          "ec2:RunInstances",
          "iam:GetInstanceProfile",
          "iam:PassRole"
        ]
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createqueue": {
    "name": "CreateQueue",
    "description": "Grants permission to create queues",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deletecluster": {
    "name": "DeleteCluster",
    "description": "Grants permission to delete clusters",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DeleteNetworkInterface",
      "secretsmanager:DeleteSecret"
    ]
  },
  "deletecomputenodegroup": {
    "name": "DeleteComputeNodeGroup",
    "description": "Grants permission to delete compute node groups",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DeleteLaunchTemplate",
          "ec2:TerminateInstances"
        ]
      },
      {
        "name": "computenodegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletequeue": {
    "name": "DeleteQueue",
    "description": "Grants permission to delete queues",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "queue",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcluster": {
    "name": "GetCluster",
    "description": "Grants permission to get cluster properties",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcomputenodegroup": {
    "name": "GetComputeNodeGroup",
    "description": "Grants permission to get compute node group properties",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "computenodegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getqueue": {
    "name": "GetQueue",
    "description": "Grants permission to get queue properties",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "queue",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listclusters": {
    "name": "ListClusters",
    "description": "Grants permission to list clusters",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcomputenodegroups": {
    "name": "ListComputeNodeGroups",
    "description": "Grants permission to list compute node groups",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listqueues": {
    "name": "ListQueues",
    "description": "Grants permission to list queues",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list the tags for a resource",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "registercomputenodegroupinstance": {
    "name": "RegisterComputeNodeGroupInstance",
    "description": "Grants permission to register a compute instance in a compute node group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "secretsmanager:GetSecretValue"
    ]
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "computenodegroup",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "queue",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "computenodegroup",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "queue",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updatecluster": {
    "name": "UpdateCluster",
    "description": "Grants permission to update cluster properties",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:CreateNetworkInterface",
      "ec2:CreateNetworkInterfacePermission",
      "ec2:DescribeNetworkInterfaces",
      "ec2:DescribeSecurityGroups",
      "ec2:DescribeSubnets",
      "ec2:DescribeVpcs",
      "ec2:GetSecurityGroupsForVpc",
      "iam:CreateServiceLinkedRole",
      "secretsmanager:CreateSecret",
      "secretsmanager:TagResource"
    ]
  },
  "updatecomputenodegroup": {
    "name": "UpdateComputeNodeGroup",
    "description": "Grants permission to update compute node group properties",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:CreateFleet",
          "ec2:CreateLaunchTemplate",
          "ec2:CreateLaunchTemplateVersion",
          "ec2:CreateTags",
          "ec2:DescribeImages",
          "ec2:DescribeInstanceStatus",
          "ec2:DescribeInstanceTypes",
          "ec2:DescribeInstances",
          "ec2:DescribeLaunchTemplateVersions",
          "ec2:DescribeLaunchTemplates",
          "ec2:DescribeSecurityGroups",
          "ec2:DescribeSubnets",
          "ec2:DescribeVpcs",
          "ec2:RunInstances",
          "iam:GetInstanceProfile",
          "iam:PassRole"
        ]
      },
      {
        "name": "computenodegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatequeue": {
    "name": "UpdateQueue",
    "description": "Grants permission to update queue properties",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "queue",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}