{
  "cancelimagecreation": {
    "name": "CancelImageCreation",
    "description": "Grants permission to cancel an image creation",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "cancellifecycleexecution": {
    "name": "CancelLifecycleExecution",
    "description": "Grants permission to cancel a lifecycle execution",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "lifecycleExecution",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createcomponent": {
    "name": "CreateComponent",
    "description": "Grants permission to create a new component",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "component",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "imagebuilder:TagResource",
      "kms:Encrypt",
      "kms:GenerateDataKey",
      "kms:GenerateDataKeyWithoutPlaintext"
    ]
  },
  "createcontainerrecipe": {
    "name": "CreateContainerRecipe",
    "description": "Grants permission to create a new Container Recipe",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "containerRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "ecr:DescribeImages",
      "ecr:DescribeRepositories",
      "iam:CreateServiceLinkedRole",
      "imagebuilder:GetComponent",
      "imagebuilder:GetImage",
      "imagebuilder:TagResource",
      "kms:Encrypt",
      "kms:GenerateDataKey",
      "kms:GenerateDataKeyWithoutPlaintext",
      "ssm:GetParameter"
    ]
  },
  "createdistributionconfiguration": {
    "name": "CreateDistributionConfiguration",
    "description": "Grants permission to create a new distribution configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "distributionConfiguration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "imagebuilder:TagResource",
      "ssm:GetParameter"
    ]
  },
  "createimage": {
    "name": "CreateImage",
    "description": "Grants permission to create a new image",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "iam:PassRole",
      "imagebuilder:GetContainerRecipe",
      "imagebuilder:GetDistributionConfiguration",
      "imagebuilder:GetImageRecipe",
      "imagebuilder:GetInfrastructureConfiguration",
      "imagebuilder:GetWorkflow",
      "imagebuilder:TagResource"
    ]
  },
  "createimagepipeline": {
    "name": "CreateImagePipeline",
    "description": "Grants permission to create a new image pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "imagePipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "iam:PassRole",
      "imagebuilder:GetContainerRecipe",
      "imagebuilder:GetDistributionConfiguration",
      "imagebuilder:GetImageRecipe",
      "imagebuilder:GetInfrastructureConfiguration",
      "imagebuilder:GetWorkflow",
      "imagebuilder:TagResource"
    ]
  },
  "createimagerecipe": {
    "name": "CreateImageRecipe",
    "description": "Grants permission to create a new Image Recipe",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "imageRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "ec2:DescribeImages",
      "iam:CreateServiceLinkedRole",
      "imagebuilder:GetComponent",
      "imagebuilder:GetImage",
      "imagebuilder:TagResource",
      "ssm:GetParameter"
    ]
  },
  "createinfrastructureconfiguration": {
    "name": "CreateInfrastructureConfiguration",
    "description": "Grants permission to create a new infrastructure configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "infrastructureConfiguration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "imagebuilder:CreatedResourceTagKeys",
      "imagebuilder:CreatedResourceTag/<key>",
      "imagebuilder:Ec2MetadataHttpTokens",
      "imagebuilder:StatusTopicArn"
    ],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "iam:PassRole",
      "imagebuilder:TagResource",
      "sns:Publish"
    ]
  },
  "createlifecyclepolicy": {
    "name": "CreateLifecyclePolicy",
    "description": "Grants permission to create a new lifecycle policy",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "lifecyclePolicy",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "imagebuilder:LifecyclePolicyResourceType"
    ],
    "dependentActions": [
      "iam:PassRole",
      "imagebuilder:TagResource"
    ]
  },
  "createworkflow": {
    "name": "CreateWorkflow",
    "description": "Grants permission to create a new workflow",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workflow",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "imagebuilder:TagResource",
      "kms:Encrypt",
      "kms:GenerateDataKey",
      "kms:GenerateDataKeyWithoutPlaintext",
      "s3:GetObject",
      "s3:ListBucket"
    ]
  },
  "deletecomponent": {
    "name": "DeleteComponent",
    "description": "Grants permission to delete a component",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "component",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletecontainerrecipe": {
    "name": "DeleteContainerRecipe",
    "description": "Grants permission to delete a container recipe",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "containerRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedistributionconfiguration": {
    "name": "DeleteDistributionConfiguration",
    "description": "Grants permission to delete a distribution configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "distributionConfiguration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteimage": {
    "name": "DeleteImage",
    "description": "Grants permission to delete an image",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteimagepipeline": {
    "name": "DeleteImagePipeline",
    "description": "Grants permission to delete an image pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "imagePipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteimagerecipe": {
    "name": "DeleteImageRecipe",
    "description": "Grants permission to delete an image recipe",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "imageRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteinfrastructureconfiguration": {
    "name": "DeleteInfrastructureConfiguration",
    "description": "Grants permission to delete an infrastructure configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "infrastructureConfiguration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletelifecyclepolicy": {
    "name": "DeleteLifecyclePolicy",
    "description": "Grants permission to delete a lifecycle policy",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "lifecyclePolicy",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteworkflow": {
    "name": "DeleteWorkflow",
    "description": "Grants permission to delete a workflow",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workflow",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcomponent": {
    "name": "GetComponent",
    "description": "Grants permission to view details about a component",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "component",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "kms:Decrypt"
    ]
  },
  "getcomponentpolicy": {
    "name": "GetComponentPolicy",
    "description": "Grants permission to view the resource policy associated with a component",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "component",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcontainerrecipe": {
    "name": "GetContainerRecipe",
    "description": "Grants permission to view details about a container recipe",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "containerRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcontainerrecipepolicy": {
    "name": "GetContainerRecipePolicy",
    "description": "Grants permission to view the resource policy associated with a container recipe",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "containerRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdistributionconfiguration": {
    "name": "GetDistributionConfiguration",
    "description": "Grants permission to view details about a distribution configuration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "distributionConfiguration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getimage": {
    "name": "GetImage",
    "description": "Grants permission to view details about an image",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getimagepipeline": {
    "name": "GetImagePipeline",
    "description": "Grants permission to view details about an image pipeline",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "imagePipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getimagepolicy": {
    "name": "GetImagePolicy",
    "description": "Grants permission to view the resource policy associated with an image",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getimagerecipe": {
    "name": "GetImageRecipe",
    "description": "Grants permission to view details about an image recipe",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "imageRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getimagerecipepolicy": {
    "name": "GetImageRecipePolicy",
    "description": "Grants permission to view the resource policy associated with an image recipe",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "imageRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getinfrastructureconfiguration": {
    "name": "GetInfrastructureConfiguration",
    "description": "Grants permission to view details about an infrastructure configuration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "infrastructureConfiguration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlifecycleexecution": {
    "name": "GetLifecycleExecution",
    "description": "Grants permission to view details about a lifecycle execution",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "lifecycleExecution",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlifecyclepolicy": {
    "name": "GetLifecyclePolicy",
    "description": "Grants permission to view details about a lifecycle policy",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "lifecyclePolicy",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getmarketplaceresource": {
    "name": "GetMarketplaceResource",
    "description": "Grants permission to retrieve Marketplace provided resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "component",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getworkflow": {
    "name": "GetWorkflow",
    "description": "Grants permission to view details about a workflow",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workflow",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "kms:Decrypt"
    ]
  },
  "getworkflowexecution": {
    "name": "GetWorkflowExecution",
    "description": "Grants permission to view details about a workflow execution",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workflowExecution",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getworkflowstepexecution": {
    "name": "GetWorkflowStepExecution",
    "description": "Grants permission to view details about a workflow step execution",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workflowStepExecution",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "importcomponent": {
    "name": "ImportComponent",
    "description": "Grants permission to import a new component",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "component",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "imagebuilder:TagResource",
      "kms:Encrypt",
      "kms:GenerateDataKey",
      "kms:GenerateDataKeyWithoutPlaintext"
    ]
  },
  "importdiskimage": {
    "name": "ImportDiskImage",
    "description": "Grants permission to import a disk image",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "imageVersion",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "iam:PassRole",
      "imagebuilder:GetInfrastructureConfiguration",
      "imagebuilder:GetWorkflow",
      "imagebuilder:TagResource",
      "s3:GetObject",
      "s3:ListBucket"
    ]
  },
  "importvmimage": {
    "name": "ImportVmImage",
    "description": "Grants permission to import an image",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "imageVersion",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "ec2:DescribeImages",
      "ec2:DescribeImportImageTasks",
      "iam:CreateServiceLinkedRole"
    ]
  },
  "listcomponentbuildversions": {
    "name": "ListComponentBuildVersions",
    "description": "Grants permission to list the component build versions in your account",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "componentVersion",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcomponents": {
    "name": "ListComponents",
    "description": "Grants permission to list the component versions owned by or shared with your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcontainerrecipes": {
    "name": "ListContainerRecipes",
    "description": "Grants permission to list the container recipes owned by or shared with your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listdistributionconfigurations": {
    "name": "ListDistributionConfigurations",
    "description": "Grants permission to list the distribution configurations in your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listimagebuildversions": {
    "name": "ListImageBuildVersions",
    "description": "Grants permission to list the image build versions in your account",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "imageVersion",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listimagepackages": {
    "name": "ListImagePackages",
    "description": "Grants permission to return a list of packages installed on the specified image",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listimagepipelineimages": {
    "name": "ListImagePipelineImages",
    "description": "Grants permission to return a list of images created by the specified pipeline",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "imagePipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listimagepipelines": {
    "name": "ListImagePipelines",
    "description": "Grants permission to list the image pipelines in your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listimagerecipes": {
    "name": "ListImageRecipes",
    "description": "Grants permission to list the image recipes owned by or shared with your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listimagescanfindingaggregations": {
    "name": "ListImageScanFindingAggregations",
    "description": "Grants permission to list aggregations on the image scan findings in your account",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "image",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "imagePipeline",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listimagescanfindings": {
    "name": "ListImageScanFindings",
    "description": "Grants permission to list the image scan findings for the images in your account",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "image",
        "required": false,
        "conditionKeys": [],
        "dependentActions": [
          "inspector2:ListFindings"
        ]
      },
      {
        "name": "imagePipeline",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listimages": {
    "name": "ListImages",
    "description": "Grants permission to list the image versions owned by or shared with your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listinfrastructureconfigurations": {
    "name": "ListInfrastructureConfigurations",
    "description": "Grants permission to list the infrastructure configurations in your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listlifecycleexecutionresources": {
    "name": "ListLifecycleExecutionResources",
    "description": "Grants permission to list resources for the specified lifecycle execution",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "lifecycleExecution",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listlifecycleexecutions": {
    "name": "ListLifecycleExecutions",
    "description": "Grants permission to list lifecycle executions for the specified resource",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "image",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "lifecyclePolicy",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listlifecyclepolicies": {
    "name": "ListLifecyclePolicies",
    "description": "Grants permission to list the lifecycle policies in your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list tags for an Image Builder resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "component",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "containerRecipe",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "distributionConfiguration",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "image",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "imagePipeline",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "imageRecipe",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "infrastructureConfiguration",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "lifecyclePolicy",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "workflow",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listwaitingworkflowsteps": {
    "name": "ListWaitingWorkflowSteps",
    "description": "Grants permission to list waiting workflow steps for the caller account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listworkflowbuildversions": {
    "name": "ListWorkflowBuildVersions",
    "description": "Grants permission to list the workflow build versions in your account",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workflowVersion",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listworkflowexecutions": {
    "name": "ListWorkflowExecutions",
    "description": "Grants permission to list workflow executions for the specified image",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listworkflowstepexecutions": {
    "name": "ListWorkflowStepExecutions",
    "description": "Grants permission to list workflow step executions for the specified workflow",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workflowExecution",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listworkflows": {
    "name": "ListWorkflows",
    "description": "Grants permission to list the workflow versions owned by or shared with your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putcomponentpolicy": {
    "name": "PutComponentPolicy",
    "description": "Grants permission to set the resource policy associated with a component",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "component",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putcontainerrecipepolicy": {
    "name": "PutContainerRecipePolicy",
    "description": "Grants permission to set the resource policy associated with a container recipe",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "containerRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putimagepolicy": {
    "name": "PutImagePolicy",
    "description": "Grants permission to set the resource policy associated with an image",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putimagerecipepolicy": {
    "name": "PutImageRecipePolicy",
    "description": "Grants permission to set the resource policy associated with an image recipe",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "imageRecipe",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "sendworkflowstepaction": {
    "name": "SendWorkflowStepAction",
    "description": "Grants permission to send an action to a workflow step",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workflowStepExecution",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startimagepipelineexecution": {
    "name": "StartImagePipelineExecution",
    "description": "Grants permission to create a new image from a pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "imagePipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "imagebuilder:GetImagePipeline"
    ]
  },
  "startresourcestateupdate": {
    "name": "StartResourceStateUpdate",
    "description": "Grants permission to start a state update for the specified resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "image",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag an Image Builder resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "component",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "containerRecipe",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "distributionConfiguration",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "image",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "imagePipeline",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "imageRecipe",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "infrastructureConfiguration",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "lifecyclePolicy",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "workflow",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag an Image Builder resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "component",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "containerRecipe",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "distributionConfiguration",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "image",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "imagePipeline",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "imageRecipe",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "infrastructureConfiguration",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "lifecyclePolicy",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "workflow",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}",
          "aws:TagKeys"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatedistributionconfiguration": {
    "name": "UpdateDistributionConfiguration",
    "description": "Grants permission to update an existing distribution configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "distributionConfiguration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ssm:GetParameter"
    ]
  },
  "updateimagepipeline": {
    "name": "UpdateImagePipeline",
    "description": "Grants permission to update an existing image pipeline",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "imagePipeline",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "iam:PassRole",
      "imagebuilder:GetContainerRecipe",
      "imagebuilder:GetDistributionConfiguration",
      "imagebuilder:GetImageRecipe",
      "imagebuilder:GetInfrastructureConfiguration",
      "imagebuilder:GetWorkflow"
    ]
  },
  "updateinfrastructureconfiguration": {
    "name": "UpdateInfrastructureConfiguration",
    "description": "Grants permission to update an existing infrastructure configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "infrastructureConfiguration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "imagebuilder:CreatedResourceTagKeys",
      "imagebuilder:CreatedResourceTag/<key>",
      "imagebuilder:Ec2MetadataHttpTokens",
      "imagebuilder:StatusTopicArn"
    ],
    "dependentActions": [
      "iam:PassRole",
      "sns:Publish"
    ]
  },
  "updatelifecyclepolicy": {
    "name": "UpdateLifecyclePolicy",
    "description": "Grants permission to update an existing lifecycle policy",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "lifecyclePolicy",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "imagebuilder:LifecyclePolicyResourceType"
    ],
    "dependentActions": [
      "iam:PassRole"
    ]
  }
}