{
  "createconnector": {
    "name": "CreateConnector",
    "description": "Grants permission to create an MSK Connect connector",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:CreateNetworkInterface",
      "ec2:DescribeSecurityGroups",
      "ec2:DescribeSubnets",
      "ec2:DescribeVpcs",
      "firehose:TagDeliveryStream",
      "iam:AttachRolePolicy",
      "iam:CreateServiceLinkedRole",
      "iam:PassRole",
      "iam:PutRolePolicy",
      "logs:CreateLogDelivery",
      "logs:DescribeLogGroups",
      "logs:DescribeResourcePolicies",
      "logs:GetLogDelivery",
      "logs:ListLogDeliveries",
      "logs:PutResourcePolicy",
      "s3:GetBucketPolicy",
      "s3:PutBucketPolicy"
    ]
  },
  "createcustomplugin": {
    "name": "CreateCustomPlugin",
    "description": "Grants permission to create an MSK Connect custom plugin",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "s3:GetObject"
    ]
  },
  "createworkerconfiguration": {
    "name": "CreateWorkerConfiguration",
    "description": "Grants permission to create an MSK Connect worker configuration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteconnector": {
    "name": "DeleteConnector",
    "description": "Grants permission to delete an MSK Connect connector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "connector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "logs:DeleteLogDelivery",
      "logs:ListLogDeliveries"
    ]
  },
  "deletecustomplugin": {
    "name": "DeleteCustomPlugin",
    "description": "Grants permission to delete an MSK Connect custom plugin",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "custom plugin",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteworkerconfiguration": {
    "name": "DeleteWorkerConfiguration",
    "description": "Grants permission to delete an MSK Connect worker configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "worker configuration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeconnector": {
    "name": "DescribeConnector",
    "description": "Grants permission to describe an MSK Connect connector",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "connector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeconnectoroperation": {
    "name": "DescribeConnectorOperation",
    "description": "Grants permission to describe a MSK Connect connector operation",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "connector operation",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describecustomplugin": {
    "name": "DescribeCustomPlugin",
    "description": "Grants permission to describe an MSK Connect custom plugin",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "custom plugin",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkerconfiguration": {
    "name": "DescribeWorkerConfiguration",
    "description": "Grants permission to describe an MSK Connect worker configuration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "worker configuration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconnectoroperations": {
    "name": "ListConnectorOperations",
    "description": "Grants permission to list all operations of a given MSK Connect connector",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "connector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconnectors": {
    "name": "ListConnectors",
    "description": "Grants permission to list all MSK Connect connectors in this account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcustomplugins": {
    "name": "ListCustomPlugins",
    "description": "Grants permission to list all MSK Connect custom plugins in this account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list tags of an MSK Connect resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "connector",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "custom plugin",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "worker configuration",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listworkerconfigurations": {
    "name": "ListWorkerConfigurations",
    "description": "Grants permission to list all MSK Connect worker configurations in this account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag an MSK Connect resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "connector",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "custom plugin",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      },
      {
        "name": "worker configuration",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys",
          "aws:RequestTag/${TagKey}",
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove tags from an MSK Connect resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "connector",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "custom plugin",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys"
        ],
        "dependentActions": []
      },
      {
        "name": "worker configuration",
        "required": false,
        "conditionKeys": [
          "aws:TagKeys"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateconnector": {
    "name": "UpdateConnector",
    "description": "Grants permission to update an MSK Connect connector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "connector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}