{
  "batchgetcollaborationanalysistemplate": {
    "name": "BatchGetCollaborationAnalysisTemplate",
    "description": "Grants permission to view details of analysisTemplates associated to the collaboration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "cleanrooms:GetCollaborationAnalysisTemplate"
        ]
      },
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetschema": {
    "name": "BatchGetSchema",
    "description": "Grants permission to view details for schemas",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "cleanrooms:GetSchema"
        ]
      },
      {
        "name": "configuredtableassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "idmappingtable",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchgetschemaanalysisrule": {
    "name": "BatchGetSchemaAnalysisRule",
    "description": "Grants permission to view analysis rules associated with schemas",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "cleanrooms:GetSchema"
        ]
      },
      {
        "name": "configuredtableassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "idmappingtable",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createanalysistemplate": {
    "name": "CreateAnalysisTemplate",
    "description": "Grants permission to create a new analysis template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createcollaboration": {
    "name": "CreateCollaboration",
    "description": "Grants permission to create a new collaboration, a shared data collaboration environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createconfiguredaudiencemodelassociation": {
    "name": "CreateConfiguredAudienceModelAssociation",
    "description": "Grants permission to link a Cleanrooms ML configured audience model with a collaboration by creating a new association",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredaudiencemodelassociation",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": [
          "cleanrooms-ml:GetConfiguredAudienceModel",
          "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
          "cleanrooms-ml:PutConfiguredAudienceModelPolicy"
        ]
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createconfiguredtable": {
    "name": "CreateConfiguredTable",
    "description": "Grants permission to create a new configured table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "athena:GetTableMetadata",
      "glue:BatchGetPartition",
      "glue:GetDatabase",
      "glue:GetDatabases",
      "glue:GetPartition",
      "glue:GetPartitions",
      "glue:GetSchemaVersion",
      "glue:GetTable",
      "glue:GetTables"
    ]
  },
  "createconfiguredtableanalysisrule": {
    "name": "CreateConfiguredTableAnalysisRule",
    "description": "Grants permission to create a analysis rule for a configured table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createconfiguredtableassociation": {
    "name": "CreateConfiguredTableAssociation",
    "description": "Grants permission to link a configured table with a collaboration by creating a new association",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtable",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": [
          "iam:PassRole"
        ]
      },
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createconfiguredtableassociationanalysisrule": {
    "name": "CreateConfiguredTableAssociationAnalysisRule",
    "description": "Grants permission to create an analysis rule for a configured table association",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createidmappingtable": {
    "name": "CreateIdMappingTable",
    "description": "Grants permission to link an id mapping workflow with a collaboration by creating a new id mapping table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "idmappingtable",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": [
          "entityresolution:AddPolicyStatement",
          "entityresolution:GetIdMappingWorkflow"
        ]
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createidnamespaceassociation": {
    "name": "CreateIdNamespaceAssociation",
    "description": "Grants permission to link an AWS Entity Resolution Id Namespace with a collaboration by creating a new association",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "idnamespaceassociation",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": [
          "entityresolution:AddPolicyStatement",
          "entityresolution:GetIdNamespace"
        ]
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createmembership": {
    "name": "CreateMembership",
    "description": "Grants permission to join collaborations by creating a membership",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": [
          "iam:PassRole",
          "logs:CreateLogDelivery",
          "logs:CreateLogGroup",
          "logs:DeleteLogDelivery",
          "logs:DescribeLogGroups",
          "logs:DescribeResourcePolicies",
          "logs:GetLogDelivery",
          "logs:ListLogDeliveries",
          "logs:PutResourcePolicy",
          "logs:UpdateLogDelivery",
          "s3:GetBucketLocation"
        ]
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createprivacybudgettemplate": {
    "name": "CreatePrivacyBudgetTemplate",
    "description": "Grants permission to create a new privacy budget template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "privacybudgettemplate",
        "required": true,
        "conditionKeys": [
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteanalysistemplate": {
    "name": "DeleteAnalysisTemplate",
    "description": "Grants permission to delete an existing analysis template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletecollaboration": {
    "name": "DeleteCollaboration",
    "description": "Grants permission to delete an existing collaboration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "cleanrooms-ml:DeleteConfiguredAudienceModelPolicy",
      "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
      "cleanrooms-ml:PutConfiguredAudienceModelPolicy"
    ]
  },
  "deleteconfiguredaudiencemodelassociation": {
    "name": "DeleteConfiguredAudienceModelAssociation",
    "description": "Grants permission to delete an existing configured audience model association",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredaudiencemodelassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "cleanrooms-ml:DeleteConfiguredAudienceModelPolicy",
      "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
      "cleanrooms-ml:PutConfiguredAudienceModelPolicy"
    ]
  },
  "deleteconfiguredtable": {
    "name": "DeleteConfiguredTable",
    "description": "Grants permission to delete a configured table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteconfiguredtableanalysisrule": {
    "name": "DeleteConfiguredTableAnalysisRule",
    "description": "Grants permission to delete an existing analysis rule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteconfiguredtableassociation": {
    "name": "DeleteConfiguredTableAssociation",
    "description": "Grants permission to remove a configured table association from a collaboration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteconfiguredtableassociationanalysisrule": {
    "name": "DeleteConfiguredTableAssociationAnalysisRule",
    "description": "Grants permission to delete an existing configured table association analysis rule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteidmappingtable": {
    "name": "DeleteIdMappingTable",
    "description": "Grants permission to remove an id mapping table from a collaboration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "idmappingtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "entityresolution:DeletePolicyStatement"
        ]
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteidnamespaceassociation": {
    "name": "DeleteIdNamespaceAssociation",
    "description": "Grants permission to remove an Id Namespace Association from a collaboration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "idnamespaceassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "entityresolution:DeletePolicyStatement"
        ]
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletemember": {
    "name": "DeleteMember",
    "description": "Grants permission to delete members from a collaboration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "cleanrooms-ml:DeleteConfiguredAudienceModelPolicy",
      "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
      "cleanrooms-ml:PutConfiguredAudienceModelPolicy"
    ]
  },
  "deletemembership": {
    "name": "DeleteMembership",
    "description": "Grants permission to leave collaborations by deleting a membership",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteprivacybudgettemplate": {
    "name": "DeletePrivacyBudgetTemplate",
    "description": "Grants permission to delete an existing privacy budget template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "privacybudgettemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getanalysistemplate": {
    "name": "GetAnalysisTemplate",
    "description": "Grants permission to view details for an analysis template",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcollaboration": {
    "name": "GetCollaboration",
    "description": "Grants permission to view details for a collaboration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcollaborationanalysistemplate": {
    "name": "GetCollaborationAnalysisTemplate",
    "description": "Grants permission to view details for an analysis template within a collaboration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcollaborationconfiguredaudiencemodelassociation": {
    "name": "GetCollaborationConfiguredAudienceModelAssociation",
    "description": "Grants permission to view details for a configured audience model association within a collaboration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredaudiencemodelassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcollaborationidnamespaceassociation": {
    "name": "GetCollaborationIdNamespaceAssociation",
    "description": "Grants permission to get id namespace association within a collaboration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "idnamespaceassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcollaborationprivacybudgettemplate": {
    "name": "GetCollaborationPrivacyBudgetTemplate",
    "description": "Grants permission to view details for a privacy budget template within a collaboration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "privacybudgettemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconfiguredaudiencemodelassociation": {
    "name": "GetConfiguredAudienceModelAssociation",
    "description": "Grants permission to view details for a configured audience model association",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "configuredaudiencemodelassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconfiguredtable": {
    "name": "GetConfiguredTable",
    "description": "Grants permission to view details for a configured table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "configuredtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconfiguredtableanalysisrule": {
    "name": "GetConfiguredTableAnalysisRule",
    "description": "Grants permission to view analysis rules for a configured table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "configuredtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconfiguredtableassociation": {
    "name": "GetConfiguredTableAssociation",
    "description": "Grants permission to view details for a configured table association",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconfiguredtableassociationanalysisrule": {
    "name": "GetConfiguredTableAssociationAnalysisRule",
    "description": "Grants permission to view analysis rules for a configured table association",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getidmappingtable": {
    "name": "GetIdMappingTable",
    "description": "Grants permission to view details of an id mapping table",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "idmappingtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getidnamespaceassociation": {
    "name": "GetIdNamespaceAssociation",
    "description": "Grants permission to view details of an id namespace association",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "idnamespaceassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "entityresolution:GetIdNamespace"
        ]
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getmembership": {
    "name": "GetMembership",
    "description": "Grants permission to view details about a membership",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getprivacybudgettemplate": {
    "name": "GetPrivacyBudgetTemplate",
    "description": "Grants permission to view details for a privacy budget template",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "privacybudgettemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getprotectedjob": {
    "name": "GetProtectedJob",
    "description": "Grants permission to view a protected job",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getprotectedquery": {
    "name": "GetProtectedQuery",
    "description": "Grants permission to view a protected query",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getschema": {
    "name": "GetSchema",
    "description": "Grants permission to view details for a schema",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getschemaanalysisrule": {
    "name": "GetSchemaAnalysisRule",
    "description": "Grants permission to view analysis rules associated with a schema",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "cleanrooms:GetSchema"
        ]
      },
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listanalysistemplates": {
    "name": "ListAnalysisTemplates",
    "description": "Grants permission to list available analysis templates",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcollaborationanalysistemplates": {
    "name": "ListCollaborationAnalysisTemplates",
    "description": "Grants permission to list available analysis templates within a collaboration",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcollaborationconfiguredaudiencemodelassociations": {
    "name": "ListCollaborationConfiguredAudienceModelAssociations",
    "description": "Grants permission to list available configured audience model association within a collaboration",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcollaborationidnamespaceassociations": {
    "name": "ListCollaborationIdNamespaceAssociations",
    "description": "Grants permission to list id namespace within a collaboration",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcollaborationprivacybudgettemplates": {
    "name": "ListCollaborationPrivacyBudgetTemplates",
    "description": "Grants permission to list available privacy budget templates within a collaboration",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcollaborationprivacybudgets": {
    "name": "ListCollaborationPrivacyBudgets",
    "description": "Grants permission to list privacy budgets within a collaboration",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcollaborations": {
    "name": "ListCollaborations",
    "description": "Grants permission to list available collaborations",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconfiguredaudiencemodelassociations": {
    "name": "ListConfiguredAudienceModelAssociations",
    "description": "Grants permission to list available configured audience model associations for a membership",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "configuredaudiencemodelassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconfiguredtableassociations": {
    "name": "ListConfiguredTableAssociations",
    "description": "Grants permission to list available configured table associations for a membership",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconfiguredtables": {
    "name": "ListConfiguredTables",
    "description": "Grants permission to list available configured tables",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listidmappingtables": {
    "name": "ListIdMappingTables",
    "description": "Grants permission to list available id mapping tables for a membership",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "idmappingtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listidnamespaceassociations": {
    "name": "ListIdNamespaceAssociations",
    "description": "Grants permission to list entity resolution data associations for a membership",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "idnamespaceassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listmembers": {
    "name": "ListMembers",
    "description": "Grants permission to list the members of a collaboration",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listmemberships": {
    "name": "ListMemberships",
    "description": "Grants permission to list available memberships",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprivacybudgettemplates": {
    "name": "ListPrivacyBudgetTemplates",
    "description": "Grants permission to list available privacy budget templates",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "privacybudgettemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprivacybudgets": {
    "name": "ListPrivacyBudgets",
    "description": "Grants permission to list available privacy budgets",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprotectedjobs": {
    "name": "ListProtectedJobs",
    "description": "Grants permission to list protected jobs",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprotectedqueries": {
    "name": "ListProtectedQueries",
    "description": "Grants permission to list protected queries",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listschemas": {
    "name": "ListSchemas",
    "description": "Grants permission to view available schemas for a collaboration",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list tags for a resource",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "collaboration",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredaudiencemodelassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredtable",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredtableassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "privacybudgettemplate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "passcollaboration": {
    "name": "PassCollaboration",
    "isPermissionOnly": true,
    "description": "Grants permission to access a collaboration in the context of Clean Rooms ML custom models",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "passmembership": {
    "name": "PassMembership",
    "isPermissionOnly": true,
    "description": "Grants permission to access a membership in the context of Clean Rooms ML custom models",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "populateidmappingtable": {
    "name": "PopulateIdMappingTable",
    "description": "Grants permission to start an Id Mapping Job in AWS Entity Resolution to generate id mapping results in cleanrooms collaboration.",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "idmappingtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "entityresolution:GetIdMappingWorkflow"
        ]
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "previewprivacyimpact": {
    "name": "PreviewPrivacyImpact",
    "description": "Grants permission to preview privacy budget template settings",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startprotectedjob": {
    "name": "StartProtectedJob",
    "description": "Grants permission to start protected jobs",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "cleanrooms:GetCollaborationAnalysisTemplate",
          "cleanrooms:GetSchema"
        ]
      },
      {
        "name": "analysistemplate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredtableassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startprotectedquery": {
    "name": "StartProtectedQuery",
    "description": "Grants permission to start protected queries",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "cleanrooms:GetCollaborationAnalysisTemplate",
          "cleanrooms:GetSchema",
          "s3:GetBucketLocation",
          "s3:ListBucket",
          "s3:PutObject"
        ]
      },
      {
        "name": "analysistemplate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredtableassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "idmappingtable",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "collaboration",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredaudiencemodelassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredtable",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredtableassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "idmappingtable",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "idnamespaceassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "privacybudgettemplate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "collaboration",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredaudiencemodelassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredtable",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "configuredtableassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "idmappingtable",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "idnamespaceassociation",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "privacybudgettemplate",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateanalysistemplate": {
    "name": "UpdateAnalysisTemplate",
    "description": "Grants permission to update details of the analysis template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "analysistemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatecollaboration": {
    "name": "UpdateCollaboration",
    "description": "Grants permission to update details of the collaboration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "collaboration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateconfiguredaudiencemodelassociation": {
    "name": "UpdateConfiguredAudienceModelAssociation",
    "description": "Grants permission to update a configured audience model association",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredaudiencemodelassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateconfiguredtable": {
    "name": "UpdateConfiguredTable",
    "description": "Grants permission to update an existing configured table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateconfiguredtableanalysisrule": {
    "name": "UpdateConfiguredTableAnalysisRule",
    "description": "Grants permission to update analysis rules for a configured table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateconfiguredtableassociation": {
    "name": "UpdateConfiguredTableAssociation",
    "description": "Grants permission to update a configured table association",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "iam:PassRole"
    ]
  },
  "updateconfiguredtableassociationanalysisrule": {
    "name": "UpdateConfiguredTableAssociationAnalysisRule",
    "description": "Grants permission to update analysis rules for a configured table association",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "configuredtableassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateidmappingtable": {
    "name": "UpdateIdMappingTable",
    "description": "Grants permission to update an id mapping table",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "idmappingtable",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateidnamespaceassociation": {
    "name": "UpdateIdNamespaceAssociation",
    "description": "Grants permission to update a entity resolution input association",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "idnamespaceassociation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "entityresolution:GetIdNamespace"
        ]
      },
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatemembership": {
    "name": "UpdateMembership",
    "description": "Grants permission to update details of a membership",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "iam:PassRole",
      "logs:CreateLogDelivery",
      "logs:CreateLogGroup",
      "logs:DeleteLogDelivery",
      "logs:DescribeLogGroups",
      "logs:DescribeResourcePolicies",
      "logs:GetLogDelivery",
      "logs:ListLogDeliveries",
      "logs:PutResourcePolicy",
      "logs:UpdateLogDelivery",
      "s3:GetBucketLocation"
    ]
  },
  "updateprivacybudgettemplate": {
    "name": "UpdatePrivacyBudgetTemplate",
    "description": "Grants permission to update details of the privacy budget template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "privacybudgettemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateprotectedjob": {
    "name": "UpdateProtectedJob",
    "description": "Grants permission to update protected jobs",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateprotectedquery": {
    "name": "UpdateProtectedQuery",
    "description": "Grants permission to update protected queries",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "membership",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}