{
  "associatelicense": {
    "name": "AssociateLicense",
    "description": "Grants permission to upgrade a workspace with a license",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "aws-marketplace:ViewSubscriptions"
    ]
  },
  "createworkspace": {
    "name": "CreateWorkspace",
    "description": "Grants permission to create a workspace",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": [
      "ec2:DescribeSecurityGroups",
      "ec2:DescribeSubnets",
      "ec2:GetManagedPrefixListEntries",
      "iam:CreateServiceLinkedRole",
      "organizations:DescribeOrganization",
      "sso:CreateManagedApplicationInstance",
      "sso:DescribeRegisteredRegions",
      "sso:GetSharedSsoConfiguration"
    ]
  },
  "createworkspaceapikey": {
    "name": "CreateWorkspaceApiKey",
    "description": "Grants permission to create API keys for a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createworkspaceserviceaccount": {
    "name": "CreateWorkspaceServiceAccount",
    "description": "Grants permission to create service accounts for a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createworkspaceserviceaccounttoken": {
    "name": "CreateWorkspaceServiceAccountToken",
    "description": "Grants permission to create service account tokens for a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteworkspace": {
    "name": "DeleteWorkspace",
    "description": "Grants permission to delete a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "sso:DeleteManagedApplicationInstance"
    ]
  },
  "deleteworkspaceapikey": {
    "name": "DeleteWorkspaceApiKey",
    "description": "Grants permission to delete API keys from a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteworkspaceserviceaccount": {
    "name": "DeleteWorkspaceServiceAccount",
    "description": "Grants permission to delete service accounts for a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteworkspaceserviceaccounttoken": {
    "name": "DeleteWorkspaceServiceAccountToken",
    "description": "Grants permission to delete service account tokens for a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspace": {
    "name": "DescribeWorkspace",
    "description": "Grants permission to describe a workspace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspaceauthentication": {
    "name": "DescribeWorkspaceAuthentication",
    "description": "Grants permission to describe authentication providers on a workspace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspaceconfiguration": {
    "name": "DescribeWorkspaceConfiguration",
    "description": "Grants permission to describe the current configuration string for the given workspace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatelicense": {
    "name": "DisassociateLicense",
    "description": "Grants permission to remove a license from a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listpermissions": {
    "name": "ListPermissions",
    "description": "Grants permission to list the permissions on a wokspace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list tags associated with a workspace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listversions": {
    "name": "ListVersions",
    "description": "Grants permission to list all available supported Grafana versions. Optionally, include a workspace to list the versions to which it can be upgraded",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listworkspaceserviceaccounttokens": {
    "name": "ListWorkspaceServiceAccountTokens",
    "description": "Grants permission to list service account tokens for a workspace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listworkspaceserviceaccounts": {
    "name": "ListWorkspaceServiceAccounts",
    "description": "Grants permission to list service accounts for a workspace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listworkspaces": {
    "name": "ListWorkspaces",
    "description": "Grants permission to list workspaces",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to add tags to, or update tag values of, a workspace",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove tags from a workspace",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updatepermissions": {
    "name": "UpdatePermissions",
    "description": "Grants permission to modify the permissions on a workspace",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateworkspace": {
    "name": "UpdateWorkspace",
    "description": "Grants permission to modify a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeSecurityGroups",
      "ec2:DescribeSubnets",
      "ec2:GetManagedPrefixListEntries",
      "iam:CreateServiceLinkedRole"
    ]
  },
  "updateworkspaceauthentication": {
    "name": "UpdateWorkspaceAuthentication",
    "description": "Grants permission to modify authentication providers on a workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateworkspaceconfiguration": {
    "name": "UpdateWorkspaceConfiguration",
    "description": "Grants permission to update the configuration string for the given workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}