{
  "createchallenge": {
    "name": "CreateChallenge",
    "description": "Grants permission to create a Challenge for a Connector",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createconnector": {
    "name": "CreateConnector",
    "description": "Grants permission to create a SCEP Connector in your account",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "acm-pca:DescribeCertificateAuthority",
      "acm-pca:GetCertificate",
      "acm-pca:GetCertificateAuthorityCertificate",
      "acm-pca:IssueCertificate"
    ]
  },
  "deletechallenge": {
    "name": "DeleteChallenge",
    "description": "Grants permission to delete a Challenge for a Connector",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Challenge",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteconnector": {
    "name": "DeleteConnector",
    "description": "Grants permission to delete a SCEP Connector in your account",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Connector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getchallengemetadata": {
    "name": "GetChallengeMetadata",
    "description": "Grants permission to get a Challenge for a Connector",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Challenge",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getchallengepassword": {
    "name": "GetChallengePassword",
    "description": "Grants permission to get a Challenge password for a Connector",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Challenge",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconnector": {
    "name": "GetConnector",
    "description": "Grants permission to get a SCEP Connector in your account",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Connector",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listchallengemetadata": {
    "name": "ListChallengeMetadata",
    "description": "Grants permission to list Challenges for a Connector",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconnectors": {
    "name": "ListConnectors",
    "description": "Grants permission to list the SCEP Connectors in your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list the tags for a pca-connector-scep resource in your account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a pca-connector-scep resource in your account",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Challenge",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Connector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to untag a pca-connector-scep resource in your account",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Challenge",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Connector",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  }
}