{
  "associatekmskey": {
    "name": "AssociateKmsKey",
    "description": "Grants permission to associate the specified AWS Key Management Service (AWS KMS) customer master key (CMK) with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "cancelexporttask": {
    "name": "CancelExportTask",
    "description": "Grants permission to cancel an export task if it is in PENDING or RUNNING state",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createdelivery": {
    "name": "CreateDelivery",
    "description": "Grants permission to create a delivery connecting a delivery source to a delivery destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createexporttask": {
    "name": "CreateExportTask",
    "description": "Grants permission to create an ExportTask which allows you to efficiently export data from a Log Group to your Amazon S3 bucket",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createloganomalydetector": {
    "name": "CreateLogAnomalyDetector",
    "description": "Grants permission to create a log anomaly detector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createlogdelivery": {
    "name": "CreateLogDelivery",
    "isPermissionOnly": true,
    "description": "Grants permission to create the log delivery",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createloggroup": {
    "name": "CreateLogGroup",
    "description": "Grants permission to create a new log group with the specified name",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createlogstream": {
    "name": "CreateLogStream",
    "description": "Grants permission to create a new log stream with the specified name",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-stream",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteaccountpolicy": {
    "name": "DeleteAccountPolicy",
    "description": "Grants permission to delete an account policy",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedataprotectionpolicy": {
    "name": "DeleteDataProtectionPolicy",
    "description": "Grants permission to delete a data protection policy attached to a log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedelivery": {
    "name": "DeleteDelivery",
    "description": "Grants permission to delete a delivery",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedeliverydestination": {
    "name": "DeleteDeliveryDestination",
    "description": "Grants permission to delete a delivery destination after all associated deliveries are deleted",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedeliverydestinationpolicy": {
    "name": "DeleteDeliveryDestinationPolicy",
    "description": "Grants permission to delete a delivery destination policy associated with a delivery destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedeliverysource": {
    "name": "DeleteDeliverySource",
    "description": "Grants permission to delete a delivery source after all associated deliveries are deleted",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedestination": {
    "name": "DeleteDestination",
    "description": "Grants permission to delete the destination with the specified name",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteindexpolicy": {
    "name": "DeleteIndexPolicy",
    "description": "Grants permission to delete an index policy attached to a log group",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteintegration": {
    "name": "DeleteIntegration",
    "description": "Grants permission to delete the integration",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteloganomalydetector": {
    "name": "DeleteLogAnomalyDetector",
    "description": "Grants permission to delete a log anomaly detector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletelogdelivery": {
    "name": "DeleteLogDelivery",
    "isPermissionOnly": true,
    "description": "Grants permission to delete the log delivery information for specified log delivery",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteloggroup": {
    "name": "DeleteLogGroup",
    "description": "Grants permission to delete the log group with the specified name",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletelogstream": {
    "name": "DeleteLogStream",
    "description": "Grants permission to delete a log stream",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-stream",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletemetricfilter": {
    "name": "DeleteMetricFilter",
    "description": "Grants permission to delete a metric filter associated with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletequerydefinition": {
    "name": "DeleteQueryDefinition",
    "description": "Grants permission to delete a saved CloudWatch Logs Insights query definition",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteresourcepolicy": {
    "name": "DeleteResourcePolicy",
    "description": "Grants permission to delete a resource policy from this account",
    "accessLevel": "Permissions management",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteretentionpolicy": {
    "name": "DeleteRetentionPolicy",
    "description": "Grants permission to delete the retention policy of the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletesubscriptionfilter": {
    "name": "DeleteSubscriptionFilter",
    "description": "Grants permission to delete a subscription filter associated with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetransformer": {
    "name": "DeleteTransformer",
    "description": "Grants permission to delete a transformer associated with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeaccountpolicies": {
    "name": "DescribeAccountPolicies",
    "description": "Grants permission to retrieve account policies",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeconfigurationtemplates": {
    "name": "DescribeConfigurationTemplates",
    "description": "Grants permission to retrieve a list of configuration templates of available log types",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedeliveries": {
    "name": "DescribeDeliveries",
    "description": "Grants permission to retrieve a list of deliveries an account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedeliverydestinations": {
    "name": "DescribeDeliveryDestinations",
    "description": "Grants permission to retrieve a list of delivery destinations an account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedeliverysources": {
    "name": "DescribeDeliverySources",
    "description": "Grants permission to retrieve a list of delivery sources in an account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedestinations": {
    "name": "DescribeDestinations",
    "description": "Grants permission to return all the destinations that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeexporttasks": {
    "name": "DescribeExportTasks",
    "description": "Grants permission to return all the export tasks that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describefieldindexes": {
    "name": "DescribeFieldIndexes",
    "description": "Grants permission to return all the indexing attributes that are attached with the log groups",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeindexpolicies": {
    "name": "DescribeIndexPolicies",
    "description": "Grants permission to return all the index policies that are attached with the log groups",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeloggroups": {
    "name": "DescribeLogGroups",
    "description": "Grants permission to return all the log groups that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describelogstreams": {
    "name": "DescribeLogStreams",
    "description": "Grants permission to return all the log streams that are associated with the specified log group",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describemetricfilters": {
    "name": "DescribeMetricFilters",
    "description": "Grants permission to return all the metrics filters associated with the specified log group",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describequeries": {
    "name": "DescribeQueries",
    "description": "Grants permission to return a list of CloudWatch Logs Insights queries that are scheduled, executing, or have been executed recently in this account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describequerydefinitions": {
    "name": "DescribeQueryDefinitions",
    "description": "Grants permission to return a paginated list of your saved CloudWatch Logs Insights query definitions",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeresourcepolicies": {
    "name": "DescribeResourcePolicies",
    "description": "Grants permission to return all the resource policies in this account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describesubscriptionfilters": {
    "name": "DescribeSubscriptionFilters",
    "description": "Grants permission to return all the subscription filters associated with the specified log group",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatekmskey": {
    "name": "DisassociateKmsKey",
    "description": "Grants permission to disassociate the associated AWS Key Management Service (AWS KMS) customer master key (CMK) from the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "filterlogevents": {
    "name": "FilterLogEvents",
    "description": "Grants permission to retrieve log events, optionally filtered by a filter pattern from the specified log group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdataprotectionpolicy": {
    "name": "GetDataProtectionPolicy",
    "description": "Grants permission to retrieve a data protection policy attached to a log group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdelivery": {
    "name": "GetDelivery",
    "description": "Grants permission to retrieve a single delivery",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "delivery",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdeliverydestination": {
    "name": "GetDeliveryDestination",
    "description": "Grants permission to retrieve a single delivery destination",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdeliverydestinationpolicy": {
    "name": "GetDeliveryDestinationPolicy",
    "description": "Grants permission to retrieve a delivery destination policy attached to a delivery destination",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdeliverysource": {
    "name": "GetDeliverySource",
    "description": "Grants permission to retrieve a single delivery source",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "delivery-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getintegration": {
    "name": "GetIntegration",
    "description": "Grants permission to retrieve a single integration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getloganomalydetector": {
    "name": "GetLogAnomalyDetector",
    "description": "Grants permission to get a log anomaly detector",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlogdelivery": {
    "name": "GetLogDelivery",
    "isPermissionOnly": true,
    "description": "Grants permission to get the log delivery information for specified log delivery",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlogevents": {
    "name": "GetLogEvents",
    "description": "Grants permission to retrieve log events from the specified log stream",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-stream",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getloggroupfields": {
    "name": "GetLogGroupFields",
    "description": "Grants permission to return a list of the fields that are included in log events in the specified log group, along with the percentage of log events that contain each field",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlogrecord": {
    "name": "GetLogRecord",
    "description": "Grants permission to retrieve all the fields and values of a single log event",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getqueryresults": {
    "name": "GetQueryResults",
    "description": "Grants permission to return the results from the specified query",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettransformer": {
    "name": "GetTransformer",
    "description": "Grants permission to return transformer associated with the specified log group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "link": {
    "name": "Link",
    "isPermissionOnly": true,
    "description": "Grants permission to share CloudWatch resources with a monitoring account",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listanomalies": {
    "name": "ListAnomalies",
    "description": "Grants permission to list all anomalies detected in the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listentitiesforloggroup": {
    "name": "ListEntitiesForLogGroup",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve all the entities that are associated with log group",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listintegrations": {
    "name": "ListIntegrations",
    "description": "Grants permission to list all integrations associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listloganomalydetectors": {
    "name": "ListLogAnomalyDetectors",
    "description": "Grants permission to return all the anomaly detectors that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listlogdeliveries": {
    "name": "ListLogDeliveries",
    "isPermissionOnly": true,
    "description": "Grants permission to list all the log deliveries for specified account and/or log source",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listloggroups": {
    "name": "ListLogGroups",
    "description": "Grants permission to return all the log groups that are associated with the AWS account making the request",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listloggroupsforentity": {
    "name": "ListLogGroupsForEntity",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve all the log groups that are associated with entity",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listloggroupsforquery": {
    "name": "ListLogGroupsForQuery",
    "description": "Grants permission to return all the log groups that are associated with the specified query",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list the tags for the specified resource",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "log-group",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsloggroup": {
    "name": "ListTagsLogGroup",
    "description": "Grants permission to list the tags for the specified log group",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putaccountpolicy": {
    "name": "PutAccountPolicy",
    "description": "Grants permission to attach an account policy",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putdataprotectionpolicy": {
    "name": "PutDataProtectionPolicy",
    "description": "Grants permission to attach a data protection policy to detect and redact sensitive information from log events",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putdeliverydestination": {
    "name": "PutDeliveryDestination",
    "description": "Grants permission to create/update a delivery destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "logs:DeliveryDestinationResourceArn"
    ],
    "dependentActions": []
  },
  "putdeliverydestinationpolicy": {
    "name": "PutDeliveryDestinationPolicy",
    "description": "Grants permission to attach a delivery destination policy to a delivery destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putdeliverysource": {
    "name": "PutDeliverySource",
    "description": "Grants permission to create/update a delivery source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "logs:LogGeneratingResourceArns"
    ],
    "dependentActions": []
  },
  "putdestination": {
    "name": "PutDestination",
    "description": "Grants permission to create or update a Destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "iam:PassRole"
        ]
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "putdestinationpolicy": {
    "name": "PutDestinationPolicy",
    "description": "Grants permission to create or update an access policy associated with an existing Destination",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putindexpolicy": {
    "name": "PutIndexPolicy",
    "description": "Grants permission to attach an index policy at log group level to optimize search and query",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putintegration": {
    "name": "PutIntegration",
    "description": "Grants permission to create integration between cloudwatch logs and opensearch",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putlogevents": {
    "name": "PutLogEvents",
    "description": "Grants permission to upload a batch of log events to the specified log stream",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-stream",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putmetricfilter": {
    "name": "PutMetricFilter",
    "description": "Grants permission to create or update a metric filter and associates it with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putquerydefinition": {
    "name": "PutQueryDefinition",
    "description": "Grants permission to create or update a query definition",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putresourcepolicy": {
    "name": "PutResourcePolicy",
    "description": "Grants permission to create or update a resource policy allowing other AWS services to put log events to this account",
    "accessLevel": "Permissions management",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putretentionpolicy": {
    "name": "PutRetentionPolicy",
    "description": "Grants permission to set the retention of the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putsubscriptionfilter": {
    "name": "PutSubscriptionFilter",
    "description": "Grants permission to create or update a subscription filter and associates it with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "iam:PassRole"
        ]
      },
      {
        "name": "destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "puttransformer": {
    "name": "PutTransformer",
    "description": "Grants permission to create or update a transformer and associates it with the specified log group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startlivetail": {
    "name": "StartLiveTail",
    "description": "Grants permission to start a Live Tail session in CloudWatch Logs",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startquery": {
    "name": "StartQuery",
    "description": "Grants permission to schedule a query of a log group using CloudWatch Logs Insights",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stoplivetail": {
    "name": "StopLiveTail",
    "isPermissionOnly": true,
    "description": "Grants permission to stop a Live Tail session that is in progress",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stopquery": {
    "name": "StopQuery",
    "description": "Grants permission to stop a CloudWatch Logs Insights query that is in progress",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagloggroup": {
    "name": "TagLogGroup",
    "description": "Grants permission to add or update the specified tags for the specified log group",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to add or update the specified tags for the specified resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "log-group",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "testmetricfilter": {
    "name": "TestMetricFilter",
    "description": "Grants permission to test the filter pattern of a metric filter against a sample of log event messages",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "testtransformer": {
    "name": "TestTransformer",
    "description": "Grants permission to test the transformer against a sample of log event messages",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "unmask": {
    "name": "Unmask",
    "isPermissionOnly": true,
    "description": "Grants permission to fetch unmasked log events that have been redacted with a data protection policy",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "untagloggroup": {
    "name": "UntagLogGroup",
    "description": "Grants permission to remove the specified tags from the specified log group",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "log-group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove the specified tags from the specified resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "destination",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "log-group",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateanomaly": {
    "name": "UpdateAnomaly",
    "description": "Grants permission to update an anomaly reported by a log anomaly detector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatedeliveryconfiguration": {
    "name": "UpdateDeliveryConfiguration",
    "description": "Grants permission to update configuration related to a delivery",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "delivery",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-destination",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "delivery-source",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateloganomalydetector": {
    "name": "UpdateLogAnomalyDetector",
    "description": "Grants permission to update a log anomaly detector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "anomaly-detector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatelogdelivery": {
    "name": "UpdateLogDelivery",
    "isPermissionOnly": true,
    "description": "Grants permission to update the log delivery information for specified log delivery",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  }
}