{
  "acceptattachment": {
    "name": "AcceptAttachment",
    "description": "Grants permission to accept creation of an attachment between a source and destination in a core network",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeRegions"
    ]
  },
  "associateconnectpeer": {
    "name": "AssociateConnectPeer",
    "description": "Grants permission to associate a Connect Peer",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "device",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associatecustomergateway": {
    "name": "AssociateCustomerGateway",
    "description": "Grants permission to associate a customer gateway to a device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "device",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "networkmanager:cgwArn"
    ],
    "dependentActions": []
  },
  "associatelink": {
    "name": "AssociateLink",
    "description": "Grants permission to associate a link to a device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "device",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associatetransitgatewayconnectpeer": {
    "name": "AssociateTransitGatewayConnectPeer",
    "description": "Grants permission to associate a transit gateway connect peer to a device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "device",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "networkmanager:tgwConnectPeerArn"
    ],
    "dependentActions": []
  },
  "createconnectattachment": {
    "name": "CreateConnectAttachment",
    "description": "Grants permission to create a Connect attachment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions",
          "networkmanager:TagResource"
        ]
      },
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createconnectpeer": {
    "name": "CreateConnectPeer",
    "description": "Grants permission to create a Connect Peer connection",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions",
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createconnection": {
    "name": "CreateConnection",
    "description": "Grants permission to create a new connection",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createcorenetwork": {
    "name": "CreateCoreNetwork",
    "description": "Grants permission to create a new core network",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions",
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createdevice": {
    "name": "CreateDevice",
    "description": "Grants permission to create a new device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createdirectconnectgatewayattachment": {
    "name": "CreateDirectConnectGatewayAttachment",
    "description": "Grants permission to create a Direct Connect gateway attachment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions",
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "networkmanager:directConnectGatewayArn",
      "networkmanager:edgeLocations"
    ],
    "dependentActions": []
  },
  "createglobalnetwork": {
    "name": "CreateGlobalNetwork",
    "description": "Grants permission to create a new global network",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "iam:CreateServiceLinkedRole",
      "networkmanager:TagResource"
    ]
  },
  "createlink": {
    "name": "CreateLink",
    "description": "Grants permission to create a new link",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "networkmanager:TagResource"
        ]
      },
      {
        "name": "site",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createsite": {
    "name": "CreateSite",
    "description": "Grants permission to create a new site",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createsitetositevpnattachment": {
    "name": "CreateSiteToSiteVpnAttachment",
    "description": "Grants permission to create a site-to-site VPN attachment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions",
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "networkmanager:vpnConnectionArn"
    ],
    "dependentActions": []
  },
  "createtransitgatewaypeering": {
    "name": "CreateTransitGatewayPeering",
    "description": "Grants permission to create a Transit Gateway peering",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions",
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "networkmanager:tgwArn"
    ],
    "dependentActions": []
  },
  "createtransitgatewayroutetableattachment": {
    "name": "CreateTransitGatewayRouteTableAttachment",
    "description": "Grants permission to create a TGW RTB attachment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "peering",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions",
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "networkmanager:tgwRtbArn"
    ],
    "dependentActions": []
  },
  "createvpcattachment": {
    "name": "CreateVpcAttachment",
    "description": "Grants permission to create a VPC attachment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions",
          "networkmanager:TagResource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "networkmanager:vpcArn",
      "networkmanager:subnetArns"
    ],
    "dependentActions": []
  },
  "deleteattachment": {
    "name": "DeleteAttachment",
    "description": "Grants permission to delete an attachment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeRegions"
    ]
  },
  "deleteconnectpeer": {
    "name": "DeleteConnectPeer",
    "description": "Grants permission to delete a Connect Peer",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "connect-peer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeRegions"
    ]
  },
  "deleteconnection": {
    "name": "DeleteConnection",
    "description": "Grants permission to delete a connection",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "connection",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletecorenetwork": {
    "name": "DeleteCoreNetwork",
    "description": "Grants permission to delete a core network",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeRegions"
    ]
  },
  "deletecorenetworkpolicyversion": {
    "name": "DeleteCoreNetworkPolicyVersion",
    "description": "Grants permission to delete the core network policy version",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedevice": {
    "name": "DeleteDevice",
    "description": "Grants permission to delete a device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "device",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteglobalnetwork": {
    "name": "DeleteGlobalNetwork",
    "description": "Grants permission to delete a global network",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletelink": {
    "name": "DeleteLink",
    "description": "Grants permission to delete a link",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletepeering": {
    "name": "DeletePeering",
    "description": "Grants permission to delete a peering",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "peering",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeRegions"
    ]
  },
  "deleteresourcepolicy": {
    "name": "DeleteResourcePolicy",
    "description": "Grants permission to delete a resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletesite": {
    "name": "DeleteSite",
    "description": "Grants permission to delete a site",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "site",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deregistertransitgateway": {
    "name": "DeregisterTransitGateway",
    "description": "Grants permission to deregister a transit gateway from a global network",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "networkmanager:tgwArn"
    ],
    "dependentActions": []
  },
  "describeglobalnetworks": {
    "name": "DescribeGlobalNetworks",
    "description": "Grants permission to describe global networks",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociateconnectpeer": {
    "name": "DisassociateConnectPeer",
    "description": "Grants permission to disassociate a Connect Peer",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatecustomergateway": {
    "name": "DisassociateCustomerGateway",
    "description": "Grants permission to disassociate a customer gateway from a device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "networkmanager:cgwArn"
    ],
    "dependentActions": []
  },
  "disassociatelink": {
    "name": "DisassociateLink",
    "description": "Grants permission to disassociate a link from a device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "device",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatetransitgatewayconnectpeer": {
    "name": "DisassociateTransitGatewayConnectPeer",
    "description": "Grants permission to disassociate a transit gateway connect peer from a device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "networkmanager:tgwConnectPeerArn"
    ],
    "dependentActions": []
  },
  "executecorenetworkchangeset": {
    "name": "ExecuteCoreNetworkChangeSet",
    "description": "Grants permission to apply changes to the core network",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeRegions"
    ]
  },
  "getconnectattachment": {
    "name": "GetConnectAttachment",
    "description": "Grants permission to retrieve a Connect attachment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconnectpeer": {
    "name": "GetConnectPeer",
    "description": "Grants permission to retrieve a Connect Peer",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "connect-peer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconnectpeerassociations": {
    "name": "GetConnectPeerAssociations",
    "description": "Grants permission to describe Connect Peer associations",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconnections": {
    "name": "GetConnections",
    "description": "Grants permission to describe connections",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "connection",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcorenetwork": {
    "name": "GetCoreNetwork",
    "description": "Grants permission to retrieve a core network",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcorenetworkchangeevents": {
    "name": "GetCoreNetworkChangeEvents",
    "description": "Grants permission to retrieve a list of core network change events",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcorenetworkchangeset": {
    "name": "GetCoreNetworkChangeSet",
    "description": "Grants permission to retrieve a list of core network change sets",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcorenetworkpolicy": {
    "name": "GetCoreNetworkPolicy",
    "description": "Grants permission to retrieve core network policy",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcustomergatewayassociations": {
    "name": "GetCustomerGatewayAssociations",
    "description": "Grants permission to describe customer gateway associations",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdevices": {
    "name": "GetDevices",
    "description": "Grants permission to describe devices",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "device",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdirectconnectgatewayattachment": {
    "name": "GetDirectConnectGatewayAttachment",
    "description": "Grants permission to retrieve a Direct Connect gateway attachment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlinkassociations": {
    "name": "GetLinkAssociations",
    "description": "Grants permission to describe link associations",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "device",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getlinks": {
    "name": "GetLinks",
    "description": "Grants permission to describe links",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getnetworkresourcecounts": {
    "name": "GetNetworkResourceCounts",
    "description": "Grants permission to return the number of resources for a global network grouped by type",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getnetworkresourcerelationships": {
    "name": "GetNetworkResourceRelationships",
    "description": "Grants permission to retrieve related resources for a resource within the global network",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getnetworkresources": {
    "name": "GetNetworkResources",
    "description": "Grants permission to retrieve a global network resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getnetworkroutes": {
    "name": "GetNetworkRoutes",
    "description": "Grants permission to retrieve routes for a route table within the global network",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getnetworktelemetry": {
    "name": "GetNetworkTelemetry",
    "description": "Grants permission to retrieve network telemetry objects for the global network",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getresourcepolicy": {
    "name": "GetResourcePolicy",
    "description": "Grants permission to retrieve a resource policy",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getrouteanalysis": {
    "name": "GetRouteAnalysis",
    "description": "Grants permission to retrieve a route analysis configuration and result",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getsitetositevpnattachment": {
    "name": "GetSiteToSiteVpnAttachment",
    "description": "Grants permission to retrieve a site-to-site VPN attachment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getsites": {
    "name": "GetSites",
    "description": "Grants permission to describe global networks",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "site",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettransitgatewayconnectpeerassociations": {
    "name": "GetTransitGatewayConnectPeerAssociations",
    "description": "Grants permission to describe transit gateway connect peer associations",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettransitgatewaypeering": {
    "name": "GetTransitGatewayPeering",
    "description": "Grants permission to retrieve a Transit Gateway peering",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "peering",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettransitgatewayregistrations": {
    "name": "GetTransitGatewayRegistrations",
    "description": "Grants permission to describe transit gateway registrations",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "gettransitgatewayroutetableattachment": {
    "name": "GetTransitGatewayRouteTableAttachment",
    "description": "Grants permission to retrieve a TGW RTB attachment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getvpcattachment": {
    "name": "GetVpcAttachment",
    "description": "Grants permission to retrieve a VPC attachment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listattachments": {
    "name": "ListAttachments",
    "description": "Grants permission to describe attachments",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconnectpeers": {
    "name": "ListConnectPeers",
    "description": "Grants permission to describe Connect Peers",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "connect-peer",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcorenetworkpolicyversions": {
    "name": "ListCoreNetworkPolicyVersions",
    "description": "Grants permission to list core network policy versions",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listcorenetworks": {
    "name": "ListCoreNetworks",
    "description": "Grants permission to list core networks",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listorganizationserviceaccessstatus": {
    "name": "ListOrganizationServiceAccessStatus",
    "description": "Grants permission to list organization service access status",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listpeerings": {
    "name": "ListPeerings",
    "description": "Grants permission to describe peerings",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list tags for a Network Manager resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "connect-peer",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "connection",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "core-network",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "device",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "peering",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "site",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "putcorenetworkpolicy": {
    "name": "PutCoreNetworkPolicy",
    "description": "Grants permission to create a core network policy",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeRegions"
    ]
  },
  "putresourcepolicy": {
    "name": "PutResourcePolicy",
    "description": "Grants permission to create or update a resource policy",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "registertransitgateway": {
    "name": "RegisterTransitGateway",
    "description": "Grants permission to register a transit gateway to a global network",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "networkmanager:tgwArn"
    ],
    "dependentActions": []
  },
  "rejectattachment": {
    "name": "RejectAttachment",
    "description": "Grants permission to reject attachment request",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "restorecorenetworkpolicyversion": {
    "name": "RestoreCoreNetworkPolicyVersion",
    "description": "Grants permission to restore the core network policy to a previous version",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeRegions"
    ]
  },
  "startorganizationserviceaccessupdate": {
    "name": "StartOrganizationServiceAccessUpdate",
    "description": "Grants permission to start organization service access update",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startrouteanalysis": {
    "name": "StartRouteAnalysis",
    "description": "Grants permission to start a route analysis and stores analysis configuration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a Network Manager resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "connect-peer",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "connection",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "core-network",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "device",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "peering",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "site",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag a Network Manager resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "connect-peer",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "connection",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "core-network",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "device",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "peering",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "site",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateconnection": {
    "name": "UpdateConnection",
    "description": "Grants permission to update a connection",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "connection",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatecorenetwork": {
    "name": "UpdateCoreNetwork",
    "description": "Grants permission to update a core network",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "core-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatedevice": {
    "name": "UpdateDevice",
    "description": "Grants permission to update a device",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "device",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatedirectconnectgatewayattachment": {
    "name": "UpdateDirectConnectGatewayAttachment",
    "description": "Grants permission to update a Direct Connect gateway attachment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "networkmanager:edgeLocations"
    ],
    "dependentActions": []
  },
  "updateglobalnetwork": {
    "name": "UpdateGlobalNetwork",
    "description": "Grants permission to update a global network",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatelink": {
    "name": "UpdateLink",
    "description": "Grants permission to update a link",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "link",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatenetworkresourcemetadata": {
    "name": "UpdateNetworkResourceMetadata",
    "description": "Grants permission to add or update metadata key/value pairs on network resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatesite": {
    "name": "UpdateSite",
    "description": "Grants permission to update a site",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "global-network",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "site",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatevpcattachment": {
    "name": "UpdateVpcAttachment",
    "description": "Grants permission to update a VPC attachment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "attachment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "ec2:DescribeRegions"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys",
      "networkmanager:subnetArns"
    ],
    "dependentActions": []
  }
}