{
  "addattributestofindings": {
    "name": "AddAttributesToFindings",
    "description": "Grants permission to assign attributes (key and value pairs) to the findings that are specified by the ARNs of the findings",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createassessmenttarget": {
    "name": "CreateAssessmentTarget",
    "description": "Grants permission to create a new assessment target using the ARN of the resource group that is generated by CreateResourceGroup",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createassessmenttemplate": {
    "name": "CreateAssessmentTemplate",
    "description": "Grants permission to create an assessment template for the assessment target that is specified by the ARN of the assessment target",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createexclusionspreview": {
    "name": "CreateExclusionsPreview",
    "description": "Grants permission to start the generation of an exclusions preview for the specified assessment template",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createresourcegroup": {
    "name": "CreateResourceGroup",
    "description": "Grants permission to create a resource group using the specified set of tags (key and value pairs) that are used to select the EC2 instances to be included in an Amazon Inspector assessment target",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteassessmentrun": {
    "name": "DeleteAssessmentRun",
    "description": "Grants permission to delete the assessment run that is specified by the ARN of the assessment run",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteassessmenttarget": {
    "name": "DeleteAssessmentTarget",
    "description": "Grants permission to delete the assessment target that is specified by the ARN of the assessment target",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteassessmenttemplate": {
    "name": "DeleteAssessmentTemplate",
    "description": "Grants permission to delete the assessment template that is specified by the ARN of the assessment template",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeassessmentruns": {
    "name": "DescribeAssessmentRuns",
    "description": "Grants permission to describe the assessment runs that are specified by the ARNs of the assessment runs",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeassessmenttargets": {
    "name": "DescribeAssessmentTargets",
    "description": "Grants permission to describe the assessment targets that are specified by the ARNs of the assessment targets",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeassessmenttemplates": {
    "name": "DescribeAssessmentTemplates",
    "description": "Grants permission to describe the assessment templates that are specified by the ARNs of the assessment templates",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describecrossaccountaccessrole": {
    "name": "DescribeCrossAccountAccessRole",
    "description": "Grants permission to describe the IAM role that enables Amazon Inspector to access your AWS account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeexclusions": {
    "name": "DescribeExclusions",
    "description": "Grants permission to describe the exclusions that are specified by the exclusions' ARNs",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describefindings": {
    "name": "DescribeFindings",
    "description": "Grants permission to describe the findings that are specified by the ARNs of the findings",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeresourcegroups": {
    "name": "DescribeResourceGroups",
    "description": "Grants permission to describe the resource groups that are specified by the ARNs of the resource groups",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describerulespackages": {
    "name": "DescribeRulesPackages",
    "description": "Grants permission to describe the rules packages that are specified by the ARNs of the rules packages",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getassessmentreport": {
    "name": "GetAssessmentReport",
    "description": "Grants permission to produce an assessment report that includes detailed and comprehensive results of a specified assessment run",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getexclusionspreview": {
    "name": "GetExclusionsPreview",
    "description": "Grants permission to retrieve the exclusions preview (a list of ExclusionPreview objects) specified by the preview token",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettelemetrymetadata": {
    "name": "GetTelemetryMetadata",
    "description": "Grants permission to get information about the data that is collected for the specified assessment run",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listassessmentrunagents": {
    "name": "ListAssessmentRunAgents",
    "description": "Grants permission to list the agents of the assessment runs that are specified by the ARNs of the assessment runs",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listassessmentruns": {
    "name": "ListAssessmentRuns",
    "description": "Grants permission to list the assessment runs that correspond to the assessment templates that are specified by the ARNs of the assessment templates",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listassessmenttargets": {
    "name": "ListAssessmentTargets",
    "description": "Grants permission to list the ARNs of the assessment targets within this AWS account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listassessmenttemplates": {
    "name": "ListAssessmentTemplates",
    "description": "Grants permission to list the assessment templates that correspond to the assessment targets that are specified by the ARNs of the assessment targets",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listeventsubscriptions": {
    "name": "ListEventSubscriptions",
    "description": "Grants permission to list all the event subscriptions for the assessment template that is specified by the ARN of the assessment template",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listexclusions": {
    "name": "ListExclusions",
    "description": "Grants permission to list exclusions that are generated by the assessment run",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listfindings": {
    "name": "ListFindings",
    "description": "Grants permission to list findings that are generated by the assessment runs that are specified by the ARNs of the assessment runs",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listrulespackages": {
    "name": "ListRulesPackages",
    "description": "Grants permission to list all available Amazon Inspector rules packages",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list all tags associated with an assessment template",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "previewagents": {
    "name": "PreviewAgents",
    "description": "Grants permission to preview the agents installed on the EC2 instances that are part of the specified assessment target",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "registercrossaccountaccessrole": {
    "name": "RegisterCrossAccountAccessRole",
    "description": "Grants permission to register the IAM role that Amazon Inspector uses to list your EC2 instances at the start of the assessment run or when you call the PreviewAgents action",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "removeattributesfromfindings": {
    "name": "RemoveAttributesFromFindings",
    "description": "Grants permission to remove entire attributes (key and value pairs) from the findings that are specified by the ARNs of the findings where an attribute with the specified key exists",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "settagsforresource": {
    "name": "SetTagsForResource",
    "description": "Grants permission to set tags (key and value pairs) to the assessment template that is specified by the ARN of the assessment template",
    "accessLevel": "Tagging",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startassessmentrun": {
    "name": "StartAssessmentRun",
    "description": "Grants permission to start the assessment run specified by the ARN of the assessment template",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stopassessmentrun": {
    "name": "StopAssessmentRun",
    "description": "Grants permission to stop the assessment run that is specified by the ARN of the assessment run",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "subscribetoevent": {
    "name": "SubscribeToEvent",
    "description": "Grants permission to enable the process of sending Amazon Simple Notification Service (SNS) notifications about a specified event to a specified SNS topic",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "unsubscribefromevent": {
    "name": "UnsubscribeFromEvent",
    "description": "Grants permission to disable the process of sending Amazon Simple Notification Service (SNS) notifications about a specified event to a specified SNS topic",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateassessmenttarget": {
    "name": "UpdateAssessmentTarget",
    "description": "Grants permission to update the assessment target that is specified by the ARN of the assessment target",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  }
}