{
  "applyarchiverule": {
    "name": "ApplyArchiveRule",
    "description": "Grants permission to apply an archive rule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "cancelpolicygeneration": {
    "name": "CancelPolicyGeneration",
    "description": "Grants permission to cancel a policy generation",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "checkaccessnotgranted": {
    "name": "CheckAccessNotGranted",
    "description": "Grants permission to check that specified access is not allowed by a policy",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "checknonewaccess": {
    "name": "CheckNoNewAccess",
    "description": "Grants permission to check that no new access is allowed when compared to an existing policy",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "checknopublicaccess": {
    "name": "CheckNoPublicAccess",
    "description": "Grants permission to check that public access is not allowed by a resource policy",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createaccesspreview": {
    "name": "CreateAccessPreview",
    "description": "Grants permission to create an access preview for the specified analyzer",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createanalyzer": {
    "name": "CreateAnalyzer",
    "description": "Grants permission to create an analyzer",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "iam:CreateServiceLinkedRole"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createarchiverule": {
    "name": "CreateArchiveRule",
    "description": "Grants permission to create an archive rule for the specified analyzer",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ArchiveRule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteanalyzer": {
    "name": "DeleteAnalyzer",
    "description": "Grants permission to delete the specified analyzer",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletearchiverule": {
    "name": "DeleteArchiveRule",
    "description": "Grants permission to delete archive rules for the specified analyzer",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ArchiveRule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "generatefindingrecommendation": {
    "name": "GenerateFindingRecommendation",
    "description": "Grants permission to generate recommendation steps to resolve a finding",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getaccesspreview": {
    "name": "GetAccessPreview",
    "description": "Grants permission to retrieve information about an access preview",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getanalyzedresource": {
    "name": "GetAnalyzedResource",
    "description": "Grants permission to retrieve information about an analyzed resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getanalyzer": {
    "name": "GetAnalyzer",
    "description": "Grants permission to retrieve information about analyzers",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "getarchiverule": {
    "name": "GetArchiveRule",
    "description": "Grants permission to retrieve information about archive rules for the specified analyzer",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ArchiveRule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getfinding": {
    "name": "GetFinding",
    "description": "Grants permission to retrieve findings",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getfindingrecommendation": {
    "name": "GetFindingRecommendation",
    "description": "Grants permission to retrieve recommendation steps to resolve a finding",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getfindingsstatistics": {
    "name": "GetFindingsStatistics",
    "description": "Grants permission to retrieve statistics for findings",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getgeneratedpolicy": {
    "name": "GetGeneratedPolicy",
    "description": "Grants permission to retrieve a policy that was generated using StartPolicyGeneration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listaccesspreviewfindings": {
    "name": "ListAccessPreviewFindings",
    "description": "Grants permission to retrieve a list of findings from an access preview",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listaccesspreviews": {
    "name": "ListAccessPreviews",
    "description": "Grants permission to retrieve a list of access previews",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listanalyzedresources": {
    "name": "ListAnalyzedResources",
    "description": "Grants permission to retrieve a list of resources that have been analyzed",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listanalyzers": {
    "name": "ListAnalyzers",
    "description": "Grants permission to retrieves a list of analyzers",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listarchiverules": {
    "name": "ListArchiveRules",
    "description": "Grants permission to retrieve a list of archive rules from an analyzer",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listfindings": {
    "name": "ListFindings",
    "description": "Grants permission to retrieve a list of findings from an analyzer",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listpolicygenerations": {
    "name": "ListPolicyGenerations",
    "description": "Grants permission to list all the recently started policy generations",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to retrieve a list of tags applied to a resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startpolicygeneration": {
    "name": "StartPolicyGeneration",
    "description": "Grants permission to start a policy generation",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "iam:PassRole"
    ]
  },
  "startresourcescan": {
    "name": "StartResourceScan",
    "description": "Grants permission to start a scan of the policies applied to a resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to add a tag to a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove a tag from a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateanalyzer": {
    "name": "UpdateAnalyzer",
    "description": "Grants permission to modify an analyzer's configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatearchiverule": {
    "name": "UpdateArchiveRule",
    "description": "Grants permission to modify an archive rule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ArchiveRule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatefindings": {
    "name": "UpdateFindings",
    "description": "Grants permission to modify findings",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Analyzer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "validatepolicy": {
    "name": "ValidatePolicy",
    "description": "Grants permission to validate a policy",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  }
}