{
  "addpeercluster": {
    "name": "AddPeerCluster",
    "description": "Grants permission to add a peer cluster to a multi-Region cluster",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "dsql:PutMultiRegionProperties"
    ]
  },
  "createcluster": {
    "name": "CreateCluster",
    "description": "Grants permission to create new clusters",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "iam:CreateServiceLinkedRole"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "dsql:WitnessRegion"
    ],
    "dependentActions": []
  },
  "dbconnect": {
    "name": "DbConnect",
    "description": "Grants permission to connect to the database",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "dbconnectadmin": {
    "name": "DbConnectAdmin",
    "description": "Grants permission to connect to the database with admin role. Connecting with any other role requires DbConnect permission",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletecluster": {
    "name": "DeleteCluster",
    "description": "Grants permission to delete a cluster and all of its data",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getbackupjob": {
    "name": "GetBackupJob",
    "description": "Grants permission to get the status of an Aurora DSQL cluster backup job",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcluster": {
    "name": "GetCluster",
    "description": "Grants permission to get information about a cluster",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getrestorejob": {
    "name": "GetRestoreJob",
    "description": "Grants permission to get the status of an Aurora DSQL cluster restore job",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getvpcendpointservicename": {
    "name": "GetVpcEndpointServiceName",
    "description": "Grants permission to retrieve the VPC endpoint service name for a cluster",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listclusters": {
    "name": "ListClusters",
    "description": "Grants permission to retrieve a list of clusters",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list all tags on an Aurora DSQL resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putmultiregionproperties": {
    "name": "PutMultiRegionProperties",
    "description": "Grants permission to update multi-Region properties of a cluster",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putwitnessregion": {
    "name": "PutWitnessRegion",
    "description": "Grants permission to configure and update the witness Region of a multi-Region cluster",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "dsql:PutMultiRegionProperties"
        ]
      }
    ],
    "conditionKeys": [
      "dsql:WitnessRegion"
    ],
    "dependentActions": []
  },
  "removepeercluster": {
    "name": "RemovePeerCluster",
    "description": "Grants permission to remove a peer cluster from a multi-Region cluster",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "dsql:PutMultiRegionProperties"
    ]
  },
  "startbackupjob": {
    "name": "StartBackupJob",
    "description": "Grants permission to start a backup job for an Aurora DSQL cluster",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startrestorejob": {
    "name": "StartRestoreJob",
    "description": "Grants permission to start a restore job for an Aurora DSQL cluster",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "dsql:CreateCluster",
      "iam:CreateServiceLinkedRole"
    ]
  },
  "stopbackupjob": {
    "name": "StopBackupJob",
    "description": "Grants permission to stop a backup job for an Aurora DSQL cluster",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stoprestorejob": {
    "name": "StopRestoreJob",
    "description": "Grants permission to stop a restore job for an Aurora DSQL Cluster",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to add tags to Aurora DSQL resources",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove tags from Aurora DSQL resources",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updatecluster": {
    "name": "UpdateCluster",
    "description": "Grants permission to modify cluster attributes",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Cluster",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "dsql:WitnessRegion"
    ],
    "dependentActions": []
  }
}