{
  "acceptresourceshareinvitation": {
    "name": "AcceptResourceShareInvitation",
    "description": "Grants permission to accept the specified resource share invitation",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "resource-share-invitation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:ShareOwnerAccountId",
      "ram:ResourceShareName"
    ],
    "dependentActions": []
  },
  "associateresourceshare": {
    "name": "AssociateResourceShare",
    "description": "Grants permission to associate resource(s) and/or principal(s) to a resource share",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "resource-share",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "ram:ResourceTag/${TagKey}",
      "ram:ResourceShareName",
      "ram:AllowsExternalPrincipals",
      "ram:Principal",
      "ram:RequestedResourceType",
      "ram:ResourceArn",
      "ram:RetainSharingOnAccountLeaveOrganization"
    ],
    "dependentActions": []
  },
  "associateresourcesharepermission": {
    "name": "AssociateResourceSharePermission",
    "description": "Grants permission to associate a Permission with a Resource Share",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "resource-share",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createpermission": {
    "name": "CreatePermission",
    "description": "Grants permission to create a Permission that can be associated to a Resource Share",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "ram:PermissionArn",
      "ram:PermissionResourceType",
      "aws:ResourceTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "ram:TagResource"
    ]
  },
  "createpermissionversion": {
    "name": "CreatePermissionVersion",
    "description": "Grants permission to create a new version of a Permission that can be associated to a Resource Share",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:PermissionArn",
      "ram:PermissionResourceType"
    ],
    "dependentActions": []
  },
  "createresourceshare": {
    "name": "CreateResourceShare",
    "description": "Grants permission to create a resource share with provided resource(s) and/or principal(s)",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "ram:RequestedResourceType",
      "ram:ResourceArn",
      "ram:RequestedAllowsExternalPrincipals",
      "ram:Principal",
      "ram:AllowsExternalPrincipals",
      "ram:RetainSharingOnAccountLeaveOrganization"
    ],
    "dependentActions": []
  },
  "deletepermission": {
    "name": "DeletePermission",
    "description": "Grants permission to delete a specified Permission",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "ram:PermissionArn",
      "ram:PermissionResourceType"
    ],
    "dependentActions": []
  },
  "deletepermissionversion": {
    "name": "DeletePermissionVersion",
    "description": "Grants permission to delete a specified version of a permission",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:PermissionArn",
      "ram:PermissionResourceType"
    ],
    "dependentActions": []
  },
  "deleteresourceshare": {
    "name": "DeleteResourceShare",
    "description": "Grants permission to delete resource share",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "resource-share",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "ram:ResourceTag/${TagKey}",
      "ram:ResourceShareName",
      "ram:AllowsExternalPrincipals",
      "ram:RetainSharingOnAccountLeaveOrganization"
    ],
    "dependentActions": []
  },
  "disassociateresourceshare": {
    "name": "DisassociateResourceShare",
    "description": "Grants permission to disassociate resource(s) and/or principal(s) from a resource share",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "resource-share",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "ram:ResourceTag/${TagKey}",
      "ram:ResourceShareName",
      "ram:AllowsExternalPrincipals",
      "ram:Principal",
      "ram:RequestedResourceType",
      "ram:ResourceArn",
      "ram:RetainSharingOnAccountLeaveOrganization"
    ],
    "dependentActions": []
  },
  "disassociateresourcesharepermission": {
    "name": "DisassociateResourceSharePermission",
    "description": "Grants permission to disassociate a Permission from a Resource Share",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "resource-share",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "enablesharingwithawsorganization": {
    "name": "EnableSharingWithAwsOrganization",
    "description": "Grants permission to access customer's organization and create a SLR in the customer's account",
    "accessLevel": "Permissions management",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "organizations:DescribeOrganization",
      "organizations:EnableAWSServiceAccess"
    ]
  },
  "getpermission": {
    "name": "GetPermission",
    "description": "Grants permission to get the contents of an AWS RAM permission",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:PermissionArn"
    ],
    "dependentActions": []
  },
  "getresourcepolicies": {
    "name": "GetResourcePolicies",
    "description": "Grants permission to get the policies for the specified resources that you own and have shared",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getresourceshareassociations": {
    "name": "GetResourceShareAssociations",
    "description": "Grants permission to get a set of resource share associations from a provided list or with a specified status of the specified type",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getresourceshareinvitations": {
    "name": "GetResourceShareInvitations",
    "description": "Grants permission to get resource share invitations by the specified invitation arn or those for the resource share",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getresourceshares": {
    "name": "GetResourceShares",
    "description": "Grants permission to get a set of resource shares from a provided list or with a specified status",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "listpendinginvitationresources": {
    "name": "ListPendingInvitationResources",
    "description": "Grants permission to list the resources in a resource share that is shared with you but that the invitation is still pending for",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "resource-share-invitation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:ResourceShareName"
    ],
    "dependentActions": []
  },
  "listpermissionassociations": {
    "name": "ListPermissionAssociations",
    "description": "Grants permission to list information about the permission and any associations",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:PermissionArn",
      "ram:PermissionResourceType"
    ],
    "dependentActions": []
  },
  "listpermissionversions": {
    "name": "ListPermissionVersions",
    "description": "Grants permission to list the versions of an AWS RAM permission",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listpermissions": {
    "name": "ListPermissions",
    "description": "Grants permission to list the AWS RAM permissions",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprincipals": {
    "name": "ListPrincipals",
    "description": "Grants permission to list the principals that you have shared resources with or that have shared resources with you",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listreplacepermissionassociationswork": {
    "name": "ListReplacePermissionAssociationsWork",
    "description": "Grants permission to retrieve the status of the asynchronous permission replacement",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listresourcesharepermissions": {
    "name": "ListResourceSharePermissions",
    "description": "Grants permission to list the Permissions associated with a Resource Share",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "resource-share",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "ram:ResourceShareName",
      "ram:AllowsExternalPrincipals",
      "ram:RetainSharingOnAccountLeaveOrganization"
    ],
    "dependentActions": []
  },
  "listresourcetypes": {
    "name": "ListResourceTypes",
    "description": "Grants permission to list the shareable resource types supported by AWS RAM",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listresources": {
    "name": "ListResources",
    "description": "Grants permission to list the resources that you added to resource shares or the resources that are shared with you",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsourceassociations": {
    "name": "ListSourceAssociations",
    "description": "Grants permission to list source associations for resource shares",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "promotepermissioncreatedfrompolicy": {
    "name": "PromotePermissionCreatedFromPolicy",
    "description": "Grants permission to create a separate, fully manageable customer managed permission",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:PermissionArn",
      "ram:PermissionResourceType"
    ],
    "dependentActions": []
  },
  "promoteresourcesharecreatedfrompolicy": {
    "name": "PromoteResourceShareCreatedFromPolicy",
    "description": "Grants permission to promote the specified resource share",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "resource-share",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "rejectresourceshareinvitation": {
    "name": "RejectResourceShareInvitation",
    "description": "Grants permission to reject the specified resource share invitation",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "resource-share-invitation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:ShareOwnerAccountId",
      "ram:ResourceShareName"
    ],
    "dependentActions": []
  },
  "replacepermissionassociations": {
    "name": "ReplacePermissionAssociations",
    "description": "Grants permission to update all resource shares to a new permission",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:PermissionArn",
      "ram:PermissionResourceType"
    ],
    "dependentActions": []
  },
  "setdefaultpermissionversion": {
    "name": "SetDefaultPermissionVersion",
    "description": "Grants permission to specify a version number as the default version for the respective customer managed permission",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "ram:PermissionArn",
      "ram:PermissionResourceType"
    ],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag the specified resource share or permission",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "resource-share",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag the specified resource share or permission",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "customer-managed-permission",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "resource-share",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateresourceshare": {
    "name": "UpdateResourceShare",
    "description": "Grants permission to update attributes of the resource share",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "resource-share",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "ram:ResourceTag/${TagKey}",
      "ram:ResourceShareName",
      "ram:AllowsExternalPrincipals",
      "ram:RequestedAllowsExternalPrincipals",
      "ram:RetainSharingOnAccountLeaveOrganization"
    ],
    "dependentActions": []
  }
}