{
  "createnamespace": {
    "name": "CreateNamespace",
    "description": "Grants permission to create a namespace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createtable": {
    "name": "CreateTable",
    "description": "Grants permission to create a table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:SSEAlgorithm",
      "s3tables:KMSKeyArn",
      "s3tables:TableBucketTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createtablebucket": {
    "name": "CreateTableBucket",
    "description": "Grants permission to create a table bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:SSEAlgorithm",
      "s3tables:KMSKeyArn",
      "s3tables:TableBucketTag/${TagKey}",
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deletenamespace": {
    "name": "DeleteNamespace",
    "description": "Grants permission to delete a namespace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace"
    ],
    "dependentActions": []
  },
  "deletetable": {
    "name": "DeleteTable",
    "description": "Grants permission to delete a table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "deletetablebucket": {
    "name": "DeleteTableBucket",
    "description": "Grants permission to delete a table bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetablebucketencryption": {
    "name": "DeleteTableBucketEncryption",
    "description": "Grants permission to delete encryption configuration on a table bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetablebucketmetricsconfiguration": {
    "name": "DeleteTableBucketMetricsConfiguration",
    "description": "Grants permission to delete a metrics configuration on a table bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetablebucketpolicy": {
    "name": "DeleteTableBucketPolicy",
    "description": "Grants permission to delete a policy on a table bucket",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetablebucketreplication": {
    "name": "DeleteTableBucketReplication",
    "description": "Grants permission to delete table bucket replication configuration on a bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetablepolicy": {
    "name": "DeleteTablePolicy",
    "description": "Grants permission to delete a policy on a table",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "deletetablereplication": {
    "name": "DeleteTableReplication",
    "description": "Grants permission to delete table replication configuration on a table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "getnamespace": {
    "name": "GetNamespace",
    "description": "Grants permission to get a namespace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace"
    ],
    "dependentActions": []
  },
  "gettable": {
    "name": "GetTable",
    "description": "Grants permission to retrieve a table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablebucket": {
    "name": "GetTableBucket",
    "description": "Grants permission to retrieve a table bucket",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettablebucketencryption": {
    "name": "GetTableBucketEncryption",
    "description": "Grants permission to retrieve encryption configuration on a table bucket",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettablebucketmaintenanceconfiguration": {
    "name": "GetTableBucketMaintenanceConfiguration",
    "description": "Grants permission to retrieve a maintenance configuration on a table bucket",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettablebucketmetricsconfiguration": {
    "name": "GetTableBucketMetricsConfiguration",
    "description": "Grants permission to retrieve a metrics configuration on a bucket",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettablebucketpolicy": {
    "name": "GetTableBucketPolicy",
    "description": "Grants permission to retrieve a policy on a table bucket",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettablebucketreplication": {
    "name": "GetTableBucketReplication",
    "description": "Grants permission to retrieve a table bucket replication configuration on a bucket",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettablebucketstorageclass": {
    "name": "GetTableBucketStorageClass",
    "description": "Grants permission to retrieve the storage class configuration for a table bucket",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettabledata": {
    "name": "GetTableData",
    "isPermissionOnly": true,
    "description": "Grants permission to read metadata and data objects from a table storage endpoint using S3 APIs",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettableencryption": {
    "name": "GetTableEncryption",
    "description": "Grants permission to retrieve encryption configuration on a table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablemaintenanceconfiguration": {
    "name": "GetTableMaintenanceConfiguration",
    "description": "Grants permission to retrieve a maintenance configuration on a table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablemaintenancejobstatus": {
    "name": "GetTableMaintenanceJobStatus",
    "description": "Grants permission to retrieve the status of maintenance jobs on a table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablemetadatalocation": {
    "name": "GetTableMetadataLocation",
    "description": "Grants permission to retrieve the metadata location of a table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablepolicy": {
    "name": "GetTablePolicy",
    "description": "Grants permission to retrieve a policy on a table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablerecordexpirationconfiguration": {
    "name": "GetTableRecordExpirationConfiguration",
    "description": "Grants permission to retrieve a table maintenance configuration on a system table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablerecordexpirationjobstatus": {
    "name": "GetTableRecordExpirationJobStatus",
    "description": "Grants permission to retrieve the status of table record expiration jobs on a system table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablereplication": {
    "name": "GetTableReplication",
    "description": "Grants permission to retrieve a table replication configuration on a table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablereplicationstatus": {
    "name": "GetTableReplicationStatus",
    "description": "Grants permission to retrieve a table replication status on a table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "gettablestorageclass": {
    "name": "GetTableStorageClass",
    "description": "Grants permission to retrieve the storage class configuration for a specific table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "listnamespaces": {
    "name": "ListNamespaces",
    "description": "Grants permission to list namespaces",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtablebuckets": {
    "name": "ListTableBuckets",
    "description": "Grants permission to list table buckets",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtables": {
    "name": "ListTables",
    "description": "Grants permission to list tables",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace"
    ],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list the tags for an S3 Tables resource",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Table",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "TableBucket",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "s3tables:TableBucketTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "puttablebucketencryption": {
    "name": "PutTableBucketEncryption",
    "description": "Grants permission to put or overwrite encryption configuration on a table bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:KMSKeyArn",
      "s3tables:SSEAlgorithm"
    ],
    "dependentActions": []
  },
  "puttablebucketmaintenanceconfiguration": {
    "name": "PutTableBucketMaintenanceConfiguration",
    "description": "Grants permission to put a maintenance configuration on a table bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "puttablebucketmetricsconfiguration": {
    "name": "PutTableBucketMetricsConfiguration",
    "description": "Grants permission to create or overwrite a metrics configuration on a table bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "puttablebucketpolicy": {
    "name": "PutTableBucketPolicy",
    "description": "Grants permission to create or overwrite a policy on a table bucket",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "puttablebucketreplication": {
    "name": "PutTableBucketReplication",
    "description": "Grants permission to put table bucket replication configuration on a bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "puttablebucketstorageclass": {
    "name": "PutTableBucketStorageClass",
    "description": "Grants permission to set or update the storage class configuration for a table bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "TableBucket",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:StorageClass"
    ],
    "dependentActions": []
  },
  "puttabledata": {
    "name": "PutTableData",
    "isPermissionOnly": true,
    "description": "Grants permission to write metadata and data objects to a table storage endpoint using S3 APIs",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "puttableencryption": {
    "name": "PutTableEncryption",
    "isPermissionOnly": true,
    "description": "Grants permission to put encryption configuration on a table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:SSEAlgorithm",
      "s3tables:KMSKeyArn"
    ],
    "dependentActions": []
  },
  "puttablemaintenanceconfiguration": {
    "name": "PutTableMaintenanceConfiguration",
    "description": "Grants permission to put a maintenance configuration on a table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "puttablepolicy": {
    "name": "PutTablePolicy",
    "description": "Grants permission to create or overwrite a policy on a table",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "puttablerecordexpirationconfiguration": {
    "name": "PutTableRecordExpirationConfiguration",
    "description": "Grants permission to put a table record expiration configuration on a system table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "puttablereplication": {
    "name": "PutTableReplication",
    "description": "Grants permission to put table replication configuration on a table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "puttablestorageclass": {
    "name": "PutTableStorageClass",
    "description": "Grants permission to set or update the storage class configuration for a table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName",
      "s3tables:StorageClass"
    ],
    "dependentActions": []
  },
  "renametable": {
    "name": "RenameTable",
    "description": "Grants permission to rename a table or move a table across namespaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a S3 Tables resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Table",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "TableBucket",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "s3tables:TableBucketTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag a S3 Tables resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Table",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "TableBucket",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:ResourceTag/${TagKey}",
      "s3tables:TableBucketTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatetablemetadatalocation": {
    "name": "UpdateTableMetadataLocation",
    "description": "Grants permission to update the metadata location of a table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Table",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "s3tables:namespace",
      "s3tables:tableName"
    ],
    "dependentActions": []
  }
}