{
  "createcredentiallocker": {
    "name": "CreateCredentialLocker",
    "description": "Grants permission to create a product credential locker. This operation will trigger the creation of all the manufacturing resources including Wi-Fi setup key pair and device certificate",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createdestination": {
    "name": "CreateDestination",
    "description": "Grants permission to create a destination",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createeventlogconfiguration": {
    "name": "CreateEventLogConfiguration",
    "description": "Grants permission to set the event log configuration for the account, a resource type, or a specific resource",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createmanagedthing": {
    "name": "CreateManagedThing",
    "description": "Grants permission to create a Managed Thing",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createnotificationconfiguration": {
    "name": "CreateNotificationConfiguration",
    "description": "Grants permission to create a notification configuration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createotatask": {
    "name": "CreateOtaTask",
    "description": "Grants permission to customers to create an OTA task to update their devices",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createotataskconfiguration": {
    "name": "CreateOtaTaskConfiguration",
    "description": "Grants permission to create an OTA task configuration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createprovisioningprofile": {
    "name": "CreateProvisioningProfile",
    "description": "Grants permission to create a new provisioning profile",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletecredentiallocker": {
    "name": "DeleteCredentialLocker",
    "description": "Grants permission to delete a Credential Locker. This operation cannot be undone and any existing device won't be able to use the IoT managed integrations Setup",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "CredentialLockerResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedestination": {
    "name": "DeleteDestination",
    "description": "Grants permission to delete a destination",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteeventlogconfiguration": {
    "name": "DeleteEventLogConfiguration",
    "description": "Grants permission to delete an event log configuration by log configuration ID",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletemanagedthing": {
    "name": "DeleteManagedThing",
    "description": "Grants permission to delete a managed thing. If a Controller is deleted, all the devices connected to it will have their status changed to pending. Note, it is not possible to remove a Cloud device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ManagedThingResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletenotificationconfiguration": {
    "name": "DeleteNotificationConfiguration",
    "description": "Grants permission to delete a notification configuration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteotatask": {
    "name": "DeleteOtaTask",
    "description": "Grants permission to delete an OTA task",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "OtaTaskResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteotataskconfiguration": {
    "name": "DeleteOtaTaskConfiguration",
    "description": "Grants permission to delete a OTA task configuration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteprovisioningprofile": {
    "name": "DeleteProvisioningProfile",
    "description": "Grants permission to delete a provisioning Profile",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ProvisioningProfileResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcredentiallocker": {
    "name": "GetCredentialLocker",
    "description": "Grants permission to get an existing Credential Locker information",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "CredentialLockerResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcustomendpoint": {
    "name": "GetCustomEndpoint",
    "description": "Grants permission to customers to retrieve the custom endpoint address",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdefaultencryptionconfiguration": {
    "name": "GetDefaultEncryptionConfiguration",
    "description": "Grants permission to get a connector by AWS ARN",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdestination": {
    "name": "GetDestination",
    "description": "Grants permission to get a destination",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdevicediscovery": {
    "name": "GetDeviceDiscovery",
    "description": "Grants permission to get the current state of a device discovery",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "geteventlogconfiguration": {
    "name": "GetEventLogConfiguration",
    "description": "Grants permission to get an event log configuration by log configuration ID",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gethubconfiguration": {
    "name": "GetHubConfiguration",
    "description": "Grants permission to get hub configuration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getmanagedthing": {
    "name": "GetManagedThing",
    "description": "Grants permission to get a managed thing",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ManagedThingResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getmanagedthingcapabilities": {
    "name": "GetManagedThingCapabilities",
    "description": "Grants permission to get capabilities by ManagedThingId",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ManagedThingResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getmanagedthingconnectivitydata": {
    "name": "GetManagedThingConnectivityData",
    "description": "Grants permission to get the connectivity status of a Managed Thing",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ManagedThingResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getmanagedthingmetadata": {
    "name": "GetManagedThingMetaData",
    "description": "Grants permission to get metaData info by ManagedThingId",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ManagedThingResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getmanagedthingstate": {
    "name": "GetManagedThingState",
    "description": "Grants permission to get managed thing states by managed thing id",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ManagedThingResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getnotificationconfiguration": {
    "name": "GetNotificationConfiguration",
    "description": "Grants permission to get a notification configuration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getotatask": {
    "name": "GetOtaTask",
    "description": "Grants permission to get the Ota task",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "OtaTaskResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getotataskconfiguration": {
    "name": "GetOtaTaskConfiguration",
    "description": "Grants permission to get an OTA task configuration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getprovisioningprofile": {
    "name": "GetProvisioningProfile",
    "description": "Grants permission to get an existing provisioning profile information",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ProvisioningProfileResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getruntimelogconfiguration": {
    "name": "GetRuntimeLogConfiguration",
    "description": "Grants permission to get runtime log configuration for a specific managed thing or for all managed things as a group",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getschemaversion": {
    "name": "GetSchemaVersion",
    "description": "Grants permission to get a schema version with the provided information",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcredentiallockers": {
    "name": "ListCredentialLockers",
    "description": "Grants permission to list the existing Credential Locker",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listdestinations": {
    "name": "ListDestinations",
    "description": "Grants permission to list all the destinations",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listeventlogconfigurations": {
    "name": "ListEventLogConfigurations",
    "description": "Grants permission to list all event log configurations for account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listmanagedthingschemas": {
    "name": "ListManagedThingSchemas",
    "description": "Grants permission to list Schemas Associated With Managed Thing",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ManagedThingResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listmanagedthings": {
    "name": "ListManagedThings",
    "description": "Grants permission to list all the managed things",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listnotificationconfigurations": {
    "name": "ListNotificationConfigurations",
    "description": "Grants permission to list all the notification configurations",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listotataskconfigurations": {
    "name": "ListOtaTaskConfigurations",
    "description": "Grants permission to list all the OTA task configurations",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listotataskexecutions": {
    "name": "ListOtaTaskExecutions",
    "description": "Grants permission to list all the Ota task executions",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "OtaTaskResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listotatasks": {
    "name": "ListOtaTasks",
    "description": "Grants permission to list all the OTA tasks",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprovisioningprofiles": {
    "name": "ListProvisioningProfiles",
    "description": "Grants permission to list the existing provisioning profile",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listschemaversions": {
    "name": "ListSchemaVersions",
    "description": "Grants permission to list schema versions with the provided information",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putdefaultencryptionconfiguration": {
    "name": "PutDefaultEncryptionConfiguration",
    "description": "Grants permission to associate KMS key with IoT managed integrations",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "puthubconfiguration": {
    "name": "PutHubConfiguration",
    "description": "Grants permission to update a hub configuration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putruntimelogconfiguration": {
    "name": "PutRuntimeLogConfiguration",
    "description": "Grants permission to set the runtime log configuration for a specific managed thing or for all managed  things as a group",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "registercustomendpoint": {
    "name": "RegisterCustomEndpoint",
    "description": "Grants permission to customers to request us to manage the server trust for them or bring their own external server trusts for the custom domain",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "resetruntimelogconfiguration": {
    "name": "ResetRuntimeLogConfiguration",
    "description": "Grants permission to reset a runtime log configuration for a specific managed thing or for all managed things as a group",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "sendmanagedthingcommand": {
    "name": "SendManagedThingCommand",
    "description": "Grants permission to use the SendManagedThingCommand API to send commands to managed things",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startdevicediscovery": {
    "name": "StartDeviceDiscovery",
    "description": "Grants permission to request to start device discovery",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatedestination": {
    "name": "UpdateDestination",
    "description": "Grants permission to update a destination",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateeventlogconfiguration": {
    "name": "UpdateEventLogConfiguration",
    "description": "Grants permission to update an event log configuration by log configuration ID",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatemanagedthing": {
    "name": "UpdateManagedThing",
    "description": "Grants permission to update a managed thing",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ManagedThingResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatenotificationconfiguration": {
    "name": "UpdateNotificationConfiguration",
    "description": "Grants permission to update a notification configuration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateotatask": {
    "name": "UpdateOtaTask",
    "description": "Grants permission to update an OTA Task",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "OtaTaskResource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}