{
  "delete": {
    "name": "DELETE",
    "description": "Grants permission to delete a particular resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ApiKey",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Authorizer",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "BasePathMapping",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "ClientCertificate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Deployment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationPart",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationVersion",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainNameAccessAssociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "GatewayResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "IntegrationResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Method",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "MethodResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Model",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PrivateBasePathMapping",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PrivateDomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RequestValidator",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Resource",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RestApi",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Stage",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Tags",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Template",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlan",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlanKey",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "VpcLink",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "get": {
    "name": "GET",
    "description": "Grants permission to read a particular resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Account",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "ApiKey",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "ApiKeys",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Authorizer",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Authorizers",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "BasePathMapping",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "BasePathMappings",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "ClientCertificate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "ClientCertificates",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Deployment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Deployments",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationPart",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationParts",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationVersion",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationVersions",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainNameAccessAssociations",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainNames",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "GatewayResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "GatewayResponses",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "IntegrationResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Method",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "MethodResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Model",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Models",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PrivateBasePathMapping",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PrivateBasePathMappings",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PrivateDomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RequestValidator",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RequestValidators",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Resource",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Resources",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RestApi",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RestApis",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Sdk",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Stage",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Stages",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Tags",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlan",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlanKey",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlanKeys",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlans",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "VpcLink",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "VpcLinks",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "patch": {
    "name": "PATCH",
    "description": "Grants permission to update a particular resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Account",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "ApiKey",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Authorizer",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "BasePathMapping",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "ClientCertificate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Deployment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationPart",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationVersion",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "GatewayResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "IntegrationResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Method",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "MethodResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Model",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PrivateBasePathMapping",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PrivateDomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RequestValidator",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Resource",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RestApi",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Stage",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Template",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlan",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlanKey",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "VpcLink",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "post": {
    "name": "POST",
    "description": "Grants permission to create a particular resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ApiKeys",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Authorizers",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "BasePathMappings",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "ClientCertificates",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Deployments",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationParts",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DocumentationVersions",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainNameAccessAssociations",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainNames",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "GatewayResponses",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "IntegrationResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "MethodResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Models",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PrivateBasePathMappings",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RequestValidators",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Resources",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RestApis",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Stages",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlanKeys",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "UsagePlans",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "VpcLinks",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "put": {
    "name": "PUT",
    "description": "Grants permission to update a particular resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "DocumentationPart",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "GatewayResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "IntegrationResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "MethodResponse",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RestApi",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Tags",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "addcertificatetodomain": {
    "name": "AddCertificateToDomain",
    "description": "Grants permission to add certificates for mutual TLS authentication to a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "DomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainNames",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createaccessassociation": {
    "name": "CreateAccessAssociation",
    "description": "Grants permission to create an access association from an access association source to a custom domain name for private APIs",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "PrivateDomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "rejectaccessassociation": {
    "name": "RejectAccessAssociation",
    "description": "Grants permission to reject an existing access association owned by another account to a custom domain name for private APIs",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "PrivateDomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "removecertificatefromdomain": {
    "name": "RemoveCertificateFromDomain",
    "description": "Grants permission to remove certificates for mutual TLS authentication from a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "DomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "DomainNames",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "setwebacl": {
    "name": "SetWebACL",
    "description": "Grants permission to set a WAF access control list (ACL). This is an additional authorization control for managing the Stage resource due to the sensitive nature of WebAcl's",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "Stage",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Stages",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatedomainnamemanagementpolicy": {
    "name": "UpdateDomainNameManagementPolicy",
    "description": "Grants permission to update the management policy of a custom domain name for private APIs",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "PrivateDomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatedomainnamepolicy": {
    "name": "UpdateDomainNamePolicy",
    "description": "Grants permission to update the invoke policy of a custom domain name for private APIs",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "DomainNames",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PrivateDomainName",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updaterestapipolicy": {
    "name": "UpdateRestApiPolicy",
    "description": "Grants permission to manage the IAM resource policy for an API. This is an additional authorization control for managing an API due to the sensitive nature of the resource policy",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "RestApi",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "RestApis",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}