{
  "associateconnectorresource": {
    "name": "AssociateConnectorResource",
    "isPermissionOnly": true,
    "description": "Grants permission to associate an AWS resource with an Amazon Q connector",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createassignment": {
    "name": "CreateAssignment",
    "isPermissionOnly": true,
    "description": "Grants permission to create a user or group assignment for an Amazon Q Developer Profile",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "profile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "identitystore:UserId",
      "identitystore:GroupId"
    ],
    "dependentActions": []
  },
  "createauthgrant": {
    "name": "CreateAuthGrant",
    "isPermissionOnly": true,
    "description": "Grants permission to create OAuth user in Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "kms:Decrypt",
      "kms:GenerateDataKeyWithoutPlaintext",
      "kms:ReEncryptFrom",
      "kms:ReEncryptTo"
    ]
  },
  "createoauthappconnection": {
    "name": "CreateOAuthAppConnection",
    "isPermissionOnly": true,
    "description": "Grants permission to register an OAuth application in Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "kms:Decrypt",
      "kms:GenerateDataKeyWithoutPlaintext",
      "kms:ReEncryptFrom",
      "kms:ReEncryptTo"
    ]
  },
  "createplugin": {
    "name": "CreatePlugin",
    "isPermissionOnly": true,
    "description": "Grants permission to create and configure a third party plugin in Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "plugin",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleteassignment": {
    "name": "DeleteAssignment",
    "isPermissionOnly": true,
    "description": "Grants permission to delete a user or group assignment for an Amazon Q Developer Profile",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "profile",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "identitystore:UserId",
      "identitystore:GroupId"
    ],
    "dependentActions": []
  },
  "deleteconversation": {
    "name": "DeleteConversation",
    "isPermissionOnly": true,
    "description": "Grants permission to delete a conversation with Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteoauthappconnection": {
    "name": "DeleteOAuthAppConnection",
    "isPermissionOnly": true,
    "description": "Grants permission to delete an OAuth application in Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "kms:Decrypt",
      "kms:GenerateDataKeyWithoutPlaintext",
      "kms:ReEncryptFrom",
      "kms:ReEncryptTo"
    ]
  },
  "deleteplugin": {
    "name": "DeletePlugin",
    "isPermissionOnly": true,
    "description": "Grants permission to delete a configured plugin in Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "plugin",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "generatecodefromcommands": {
    "name": "GenerateCodeFromCommands",
    "isPermissionOnly": true,
    "description": "Grants permission to generate code from CLI commands in Amazon Q",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "generatecoderecommendations": {
    "name": "GenerateCodeRecommendations",
    "isPermissionOnly": true,
    "description": "Grants permission to generate code recommendations in Amazon Q",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconnector": {
    "name": "GetConnector",
    "isPermissionOnly": true,
    "description": "Grants permission to view information about a specific Amazon Q connector",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconversation": {
    "name": "GetConversation",
    "isPermissionOnly": true,
    "description": "Grants permission to get individual messages associated with a specific conversation with Amazon Q",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getidentitymetadata": {
    "name": "GetIdentityMetadata",
    "isPermissionOnly": true,
    "description": "Grants permission to Amazon Q to get the identity metadata",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getplugin": {
    "name": "GetPlugin",
    "isPermissionOnly": true,
    "description": "Grants permission to view information about a specific configured Amazon Q plugin",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "plugin",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "gettroubleshootingresults": {
    "name": "GetTroubleshootingResults",
    "isPermissionOnly": true,
    "description": "Grants permission to get troubleshooting results with Amazon Q",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconversations": {
    "name": "ListConversations",
    "isPermissionOnly": true,
    "description": "Grants permission to list individual conversations associated with a specific Amazon Q user",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listdashboardmetrics": {
    "name": "ListDashboardMetrics",
    "isPermissionOnly": true,
    "description": "Grants permission to read metrics to populate Amazon Q dashboard",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listpluginproviders": {
    "name": "ListPluginProviders",
    "isPermissionOnly": true,
    "description": "Grants permission to list available plugins in Amazon Q",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listplugins": {
    "name": "ListPlugins",
    "isPermissionOnly": true,
    "description": "Grants permission to list configured plugins in Amazon Q",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "plugin",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "isPermissionOnly": true,
    "description": "Grants permission to list all tags associated with an Amazon Q resource",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "plugin",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "passrequest": {
    "name": "PassRequest",
    "isPermissionOnly": true,
    "description": "Grants permission to allow Amazon Q to perform actions on your behalf",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "rejectconnector": {
    "name": "RejectConnector",
    "isPermissionOnly": true,
    "description": "Grants permission to reject a connection request for an Amazon Q connector",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "sendevent": {
    "name": "SendEvent",
    "isPermissionOnly": true,
    "description": "Grants permission to trigger asynchronous Amazon Q actions",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "kms:Decrypt",
      "kms:GenerateDataKeyWithoutPlaintext",
      "kms:ReEncryptFrom",
      "kms:ReEncryptTo"
    ]
  },
  "sendmessage": {
    "name": "SendMessage",
    "isPermissionOnly": true,
    "description": "Grants permission to send a message to Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startconversation": {
    "name": "StartConversation",
    "isPermissionOnly": true,
    "description": "Grants permission to start a conversation with Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "starttroubleshootinganalysis": {
    "name": "StartTroubleshootingAnalysis",
    "isPermissionOnly": true,
    "description": "Grants permission to start a troubleshooting analysis with Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "starttroubleshootingresolutionexplanation": {
    "name": "StartTroubleshootingResolutionExplanation",
    "isPermissionOnly": true,
    "description": "Grants permission to start a troubleshooting resolution explanation with Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "isPermissionOnly": true,
    "description": "Grants permission to associate tags with an Amazon Q resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "plugin",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "isPermissionOnly": true,
    "description": "Grants permission to remove tags associated with an Amazon Q resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "plugin",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateauthgrant": {
    "name": "UpdateAuthGrant",
    "isPermissionOnly": true,
    "description": "Grants permission to update OAuth user in Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "kms:Decrypt",
      "kms:GenerateDataKeyWithoutPlaintext",
      "kms:ReEncryptFrom",
      "kms:ReEncryptTo"
    ]
  },
  "updateconversation": {
    "name": "UpdateConversation",
    "isPermissionOnly": true,
    "description": "Grants permission to update a conversation with Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateoauthappconnection": {
    "name": "UpdateOAuthAppConnection",
    "isPermissionOnly": true,
    "description": "Grants permission to update an OAuth application in Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "kms:Decrypt",
      "kms:GenerateDataKeyWithoutPlaintext",
      "kms:ReEncryptFrom",
      "kms:ReEncryptTo"
    ]
  },
  "updateplugin": {
    "name": "UpdatePlugin",
    "isPermissionOnly": true,
    "description": "Grants permission to update a third party plugin in Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "plugin",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updatetroubleshootingcommandresult": {
    "name": "UpdateTroubleshootingCommandResult",
    "isPermissionOnly": true,
    "description": "Grants permission to update a troubleshooting command result with Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "useplugin": {
    "name": "UsePlugin",
    "isPermissionOnly": true,
    "description": "Grants permission to use Amazon Q plugins",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "plugin",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "verifyoauthappconnection": {
    "name": "VerifyOAuthAppConnection",
    "isPermissionOnly": true,
    "description": "Grants permission to verify an OAuth application in Amazon Q",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "kms:Decrypt",
      "kms:GenerateDataKeyWithoutPlaintext",
      "kms:ReEncryptFrom",
      "kms:ReEncryptTo"
    ]
  }
}