{
  "createalertmanageralerts": {
    "name": "CreateAlertManagerAlerts",
    "description": "Grants permission to create alerts",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createalertmanagerdefinition": {
    "name": "CreateAlertManagerDefinition",
    "description": "Grants permission to create an alert manager definition",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createloggingconfiguration": {
    "name": "CreateLoggingConfiguration",
    "description": "Grants permission to create a logging configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createqueryloggingconfiguration": {
    "name": "CreateQueryLoggingConfiguration",
    "description": "Grants permission to create a query logging configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createrulegroupsnamespace": {
    "name": "CreateRuleGroupsNamespace",
    "description": "Grants permission to create a rule groups namespace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rulegroupsnamespace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createscraper": {
    "name": "CreateScraper",
    "description": "Grants permission to create a scraper",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "aps:TagResource",
          "ec2:DescribeSecurityGroups",
          "ec2:DescribeSubnets",
          "eks:DescribeCluster",
          "iam:CreateServiceLinkedRole"
        ]
      },
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createworkspace": {
    "name": "CreateWorkspace",
    "description": "Grants permission to create a workspace",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deletealertmanagerdefinition": {
    "name": "DeleteAlertManagerDefinition",
    "description": "Grants permission to delete an alert manager definition",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deletealertmanagersilence": {
    "name": "DeleteAlertManagerSilence",
    "description": "Grants permission to delete a silence",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleteloggingconfiguration": {
    "name": "DeleteLoggingConfiguration",
    "description": "Grants permission to delete a logging configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deletequeryloggingconfiguration": {
    "name": "DeleteQueryLoggingConfiguration",
    "description": "Grants permission to delete a query logging configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleterulegroupsnamespace": {
    "name": "DeleteRuleGroupsNamespace",
    "description": "Grants permission to delete a rule groups namespace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rulegroupsnamespace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deletescraper": {
    "name": "DeleteScraper",
    "description": "Grants permission to delete a scraper",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "scraper",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleteworkspace": {
    "name": "DeleteWorkspace",
    "description": "Grants permission to delete a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describealertmanagerdefinition": {
    "name": "DescribeAlertManagerDefinition",
    "description": "Grants permission to describe an alert manager definition",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describeloggingconfiguration": {
    "name": "DescribeLoggingConfiguration",
    "description": "Grants permission to describe a logging configuration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describequeryloggingconfiguration": {
    "name": "DescribeQueryLoggingConfiguration",
    "description": "Grants permission to describe a query logging configuration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describerulegroupsnamespace": {
    "name": "DescribeRuleGroupsNamespace",
    "description": "Grants permission to describe a rule groups namespace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "rulegroupsnamespace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describescraper": {
    "name": "DescribeScraper",
    "description": "Grants permission to describe a scraper",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "scraper",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describeworkspace": {
    "name": "DescribeWorkspace",
    "description": "Grants permission to describe a workspace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describeworkspaceconfiguration": {
    "name": "DescribeWorkspaceConfiguration",
    "description": "Grants permission to describe workspace configuration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getalertmanagersilence": {
    "name": "GetAlertManagerSilence",
    "description": "Grants permission to get a silence",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getalertmanagerstatus": {
    "name": "GetAlertManagerStatus",
    "description": "Grants permission to get current status of an alertmanager",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getdefaultscraperconfiguration": {
    "name": "GetDefaultScraperConfiguration",
    "description": "Grants permission to get default scraper configuration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlabels": {
    "name": "GetLabels",
    "description": "Grants permission to retrieve AMP workspace labels",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getmetricmetadata": {
    "name": "GetMetricMetadata",
    "description": "Grants permission to retrieve the metadata for AMP workspace metrics",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getseries": {
    "name": "GetSeries",
    "description": "Grants permission to retrieve AMP workspace time series data",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listalertmanageralertgroups": {
    "name": "ListAlertManagerAlertGroups",
    "description": "Grants permission to list groups",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listalertmanageralerts": {
    "name": "ListAlertManagerAlerts",
    "description": "Grants permission to list alerts",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listalertmanagerreceivers": {
    "name": "ListAlertManagerReceivers",
    "description": "Grants permission to list receivers",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listalertmanagersilences": {
    "name": "ListAlertManagerSilences",
    "description": "Grants permission to list silences",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listalerts": {
    "name": "ListAlerts",
    "description": "Grants permission to list active alerts",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listrulegroupsnamespaces": {
    "name": "ListRuleGroupsNamespaces",
    "description": "Grants permission to list rule groups namespaces",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listrules": {
    "name": "ListRules",
    "description": "Grants permission to list alerting and recording rules",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listscrapers": {
    "name": "ListScrapers",
    "description": "Grants permission to list scrapers",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list tags on an AMP resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "rulegroupsnamespace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "scraper",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listworkspaces": {
    "name": "ListWorkspaces",
    "description": "Grants permission to list workspaces",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putalertmanagerdefinition": {
    "name": "PutAlertManagerDefinition",
    "description": "Grants permission to update an alert manager definition",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "putalertmanagersilences": {
    "name": "PutAlertManagerSilences",
    "description": "Grants permission to create or update a silence",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "putrulegroupsnamespace": {
    "name": "PutRuleGroupsNamespace",
    "description": "Grants permission to update a rule groups namespace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rulegroupsnamespace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "querymetrics": {
    "name": "QueryMetrics",
    "description": "Grants permission to run a query on AMP workspace metrics",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "remotewrite": {
    "name": "RemoteWrite",
    "description": "Grants permission to perform a remote write operation to initiate the streaming of metrics to AMP workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag an AMP resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "rulegroupsnamespace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "scraper",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag an AMP resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "rulegroupsnamespace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "scraper",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateloggingconfiguration": {
    "name": "UpdateLoggingConfiguration",
    "description": "Grants permission to update a logging configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatequeryloggingconfiguration": {
    "name": "UpdateQueryLoggingConfiguration",
    "description": "Grants permission to update a query logging configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatescraper": {
    "name": "UpdateScraper",
    "description": "Grants permission to update a scraper",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "scraper",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "aps:CreateScraper",
          "aps:TagResource"
        ]
      },
      {
        "name": "workspace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateworkspacealias": {
    "name": "UpdateWorkspaceAlias",
    "description": "Grants permission to modify the alias of existing AMP workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateworkspaceconfiguration": {
    "name": "UpdateWorkspaceConfiguration",
    "description": "Grants permission to update workspace configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  }
}