{
  "allowvendedlogdeliveryforresource": {
    "name": "AllowVendedLogDeliveryForResource",
    "isPermissionOnly": true,
    "description": "Grants permission to deliver logs for a global resolver",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "global-resolver",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "associatehostedzone": {
    "name": "AssociateHostedZone",
    "description": "Grants permission to associate a resource to a hosted zone",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchcreatefirewallrule": {
    "name": "BatchCreateFirewallRule",
    "description": "Grants permission to create multiple firewall rules",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchdeletefirewallrule": {
    "name": "BatchDeleteFirewallRule",
    "description": "Grants permission to delete multiple firewall rules",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchupdatefirewallrule": {
    "name": "BatchUpdateFirewallRule",
    "description": "Grants permission to update multiple firewall rules",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createaccesssource": {
    "name": "CreateAccessSource",
    "description": "Grants permission to create an access source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dns-view",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createaccesstoken": {
    "name": "CreateAccessToken",
    "description": "Grants permission to create an access token",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "access-token",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "creatednsview": {
    "name": "CreateDNSView",
    "description": "Grants permission to create a dns view",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dns-view",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createfirewalldomainlist": {
    "name": "CreateFirewallDomainList",
    "description": "Grants permission to create a firewall domain list",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "firewall-domain-list",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createfirewallrule": {
    "name": "CreateFirewallRule",
    "description": "Grants permission to create a firewall rule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dns-view",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "firewall-domain-list",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createglobalresolver": {
    "name": "CreateGlobalResolver",
    "description": "Grants permission to create a global resolver",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-resolver",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deleteaccesssource": {
    "name": "DeleteAccessSource",
    "description": "Grants permission to delete an access source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "access-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteaccesstoken": {
    "name": "DeleteAccessToken",
    "description": "Grants permission to delete an access token",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "access-token",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletednsview": {
    "name": "DeleteDNSView",
    "description": "Grants permission to delete a dns view",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dns-view",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletefirewalldomainlist": {
    "name": "DeleteFirewallDomainList",
    "description": "Grants permission to delete a firewall domain list",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "firewall-domain-list",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletefirewallrule": {
    "name": "DeleteFirewallRule",
    "description": "Grants permission to delete a firewall rule",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteglobalresolver": {
    "name": "DeleteGlobalResolver",
    "description": "Grants permission to delete a global resolver",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-resolver",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disablednsview": {
    "name": "DisableDNSView",
    "description": "Grants permission to disable a dns view",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dns-view",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatehostedzone": {
    "name": "DisassociateHostedZone",
    "description": "Grants permission to disassociate a hosted zone from a resource",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "enablednsview": {
    "name": "EnableDNSView",
    "description": "Grants permission to enable a dns view",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dns-view",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getaccesssource": {
    "name": "GetAccessSource",
    "description": "Grants permission to get an access source",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "access-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getaccesstoken": {
    "name": "GetAccessToken",
    "description": "Grants permission to get an access token",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "access-token",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdnsview": {
    "name": "GetDNSView",
    "description": "Grants permission to get a dns view",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dns-view",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getfirewalldomainlist": {
    "name": "GetFirewallDomainList",
    "description": "Grants permission to get a firewall domain list",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "firewall-domain-list",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getfirewallrule": {
    "name": "GetFirewallRule",
    "description": "Grants permission to get a firewall rule",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getglobalresolver": {
    "name": "GetGlobalResolver",
    "description": "Grants permission to get a global resolver",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "global-resolver",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gethostedzoneassociation": {
    "name": "GetHostedZoneAssociation",
    "description": "Grants permission to get a hosted zone association",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getmanagedfirewalldomainlist": {
    "name": "GetManagedFirewallDomainList",
    "description": "Grants permission to get a managed firewall domain list",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "importfirewalldomains": {
    "name": "ImportFirewallDomains",
    "description": "Grants permission to import firewall domains from an S3 bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "firewall-domain-list",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "s3:GetObject",
      "s3:ListBucket"
    ]
  },
  "listaccesssources": {
    "name": "ListAccessSources",
    "description": "Grants permission to list access sources",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listaccesstokens": {
    "name": "ListAccessTokens",
    "description": "Grants permission to list access tokens",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listdnsviews": {
    "name": "ListDNSViews",
    "description": "Grants permission to list dns views",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listfirewalldomainlists": {
    "name": "ListFirewallDomainLists",
    "description": "Grants permission to list firewall domain lists",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listfirewalldomains": {
    "name": "ListFirewallDomains",
    "description": "Grants permission to list firewall domains",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "firewall-domain-list",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listfirewallrules": {
    "name": "ListFirewallRules",
    "description": "Grants permission to list firewall rules",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "dns-view",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listglobalresolvers": {
    "name": "ListGlobalResolvers",
    "description": "Grants permission to list global resolvers",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listhostedzoneassociations": {
    "name": "ListHostedZoneAssociations",
    "description": "Grants permission to list hosted zone associations",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listmanagedfirewalldomainlists": {
    "name": "ListManagedFirewallDomainLists",
    "description": "Grants permission to list managed firewall domain lists",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list tags for a resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "access-source",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "access-token",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "dns-view",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "firewall-domain-list",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-resolver",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "access-source",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "access-token",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "dns-view",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "firewall-domain-list",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-resolver",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "access-source",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "access-token",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "dns-view",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "firewall-domain-list",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-resolver",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateaccesssource": {
    "name": "UpdateAccessSource",
    "description": "Grants permission to update an access source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "access-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateaccesstoken": {
    "name": "UpdateAccessToken",
    "description": "Grants permission to update an access token",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "access-token",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatednsview": {
    "name": "UpdateDNSView",
    "description": "Grants permission to update a dns view",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dns-view",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatefirewalldomains": {
    "name": "UpdateFirewallDomains",
    "description": "Grants permission to update firewall domains",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "firewall-domain-list",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatefirewallrule": {
    "name": "UpdateFirewallRule",
    "description": "Grants permission to update an firewall rule",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateglobalresolver": {
    "name": "UpdateGlobalResolver",
    "description": "Grants permission to update a global resolver",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-resolver",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatehostedzoneassociation": {
    "name": "UpdateHostedZoneAssociation",
    "description": "Grants permission to update a hosted zone association",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  }
}