{
  "createapplication": {
    "name": "CreateApplication",
    "description": "Grants permission to create an application within an environment",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createenvironment": {
    "name": "CreateEnvironment",
    "description": "Grants permission to create an environment",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createroute": {
    "name": "CreateRoute",
    "description": "Grants permission to create a route within an application",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:ServiceCreatedByAccount",
      "refactor-spaces:RouteCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "refactor-spaces:SourcePath",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createservice": {
    "name": "CreateService",
    "description": "Grants permission to create a service within an application",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:ServiceCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deleteapplication": {
    "name": "DeleteApplication",
    "description": "Grants permission to delete an application from an environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleteenvironment": {
    "name": "DeleteEnvironment",
    "description": "Grants permission to delete an environment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleteresourcepolicy": {
    "name": "DeleteResourcePolicy",
    "description": "Grants permission to delete a resource policy",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteroute": {
    "name": "DeleteRoute",
    "description": "Grants permission to delete a route from an application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "route",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:ServiceCreatedByAccount",
      "refactor-spaces:RouteCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "refactor-spaces:SourcePath",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deleteservice": {
    "name": "DeleteService",
    "description": "Grants permission to delete a service from an application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "service",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:ServiceCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getapplication": {
    "name": "GetApplication",
    "description": "Grants permission to get more information about an application",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getenvironment": {
    "name": "GetEnvironment",
    "description": "Grants permission to get more information for an environment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getresourcepolicy": {
    "name": "GetResourcePolicy",
    "description": "Grants permission to get the details about a resource policy",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getroute": {
    "name": "GetRoute",
    "description": "Grants permission to get more information about a route",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "route",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:ServiceCreatedByAccount",
      "refactor-spaces:RouteCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "refactor-spaces:SourcePath",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getservice": {
    "name": "GetService",
    "description": "Grants permission to get more information about a service",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "service",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:ServiceCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "listapplications": {
    "name": "ListApplications",
    "description": "Grants permission to list all the applications in an environment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listenvironmentvpcs": {
    "name": "ListEnvironmentVpcs",
    "description": "Grants permission to list all the VPCs for the environment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listenvironments": {
    "name": "ListEnvironments",
    "description": "Grants permission to list all environments",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listroutes": {
    "name": "ListRoutes",
    "description": "Grants permission to list all the routes in an application",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "route",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listservices": {
    "name": "ListServices",
    "description": "Grants permission to list all the services in an environment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "environment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list all the tags for a given resource",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putresourcepolicy": {
    "name": "PutResourcePolicy",
    "description": "Grants permission to add a resource policy",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "application",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "environment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "route",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "service",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:ServiceCreatedByAccount",
      "refactor-spaces:RouteCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "refactor-spaces:SourcePath",
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove a tag from a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "application",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "environment",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "route",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "service",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:ServiceCreatedByAccount",
      "refactor-spaces:RouteCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "refactor-spaces:SourcePath",
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "updateroute": {
    "name": "UpdateRoute",
    "description": "Grants permission to update a route from an application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "route",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "refactor-spaces:ApplicationCreatedByAccount",
      "refactor-spaces:ServiceCreatedByAccount",
      "refactor-spaces:RouteCreatedByAccount",
      "refactor-spaces:CreatedByAccountIds",
      "refactor-spaces:SourcePath",
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  }
}