{
  "acceptportfolioshare": {
    "name": "AcceptPortfolioShare",
    "description": "Grants permission to accept a portfolio that has been shared with you",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associateattributegroup": {
    "name": "AssociateAttributeGroup",
    "description": "Grants permission to associate an attribute group with an application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "AttributeGroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associatebudgetwithresource": {
    "name": "AssociateBudgetWithResource",
    "description": "Grants permission to associate a budget with a resource",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associateprincipalwithportfolio": {
    "name": "AssociatePrincipalWithPortfolio",
    "description": "Grants permission to associate an IAM principal with a portfolio, giving the specified principal access to any products associated with the specified portfolio",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associateproductwithportfolio": {
    "name": "AssociateProductWithPortfolio",
    "description": "Grants permission to associate a product with a portfolio",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associateresource": {
    "name": "AssociateResource",
    "description": "Grants permission to associate a resource with an application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "cloudformation:DescribeStacks",
          "resource-groups:CreateGroup",
          "resource-groups:GetGroup",
          "resource-groups:Tag"
        ]
      }
    ],
    "conditionKeys": [
      "servicecatalog:ResourceType",
      "servicecatalog:Resource"
    ],
    "dependentActions": []
  },
  "associateserviceactionwithprovisioningartifact": {
    "name": "AssociateServiceActionWithProvisioningArtifact",
    "description": "Grants permission to associate an action with a provisioning artifact",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associatetagoptionwithresource": {
    "name": "AssociateTagOptionWithResource",
    "description": "Grants permission to associate the specified TagOption with the specified portfolio or product",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Product",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchassociateserviceactionwithprovisioningartifact": {
    "name": "BatchAssociateServiceActionWithProvisioningArtifact",
    "description": "Grants permission to associate multiple self-service actions with provisioning artifacts",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchdisassociateserviceactionfromprovisioningartifact": {
    "name": "BatchDisassociateServiceActionFromProvisioningArtifact",
    "description": "Grants permission to disassociate a batch of self-service actions from the specified provisioning artifact",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "copyproduct": {
    "name": "CopyProduct",
    "description": "Grants permission to copy the specified source product to the specified target product or a new product",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createapplication": {
    "name": "CreateApplication",
    "description": "Grants permission to create an application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "iam:CreateServiceLinkedRole"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createattributegroup": {
    "name": "CreateAttributeGroup",
    "description": "Grants permission to create an attribute group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "AttributeGroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createconstraint": {
    "name": "CreateConstraint",
    "description": "Grants permission to create a constraint on an associated product and portfolio",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createportfolio": {
    "name": "CreatePortfolio",
    "description": "Grants permission to create a portfolio",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createportfolioshare": {
    "name": "CreatePortfolioShare",
    "description": "Grants permission to share a portfolio you own with another AWS account",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createproduct": {
    "name": "CreateProduct",
    "description": "Grants permission to create a product and that product's first provisioning artifact",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createprovisionedproductplan": {
    "name": "CreateProvisionedProductPlan",
    "description": "Grants permission to add a new provisioned product plan",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "createprovisioningartifact": {
    "name": "CreateProvisioningArtifact",
    "description": "Grants permission to add a new provisioning artifact to an existing product",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createserviceaction": {
    "name": "CreateServiceAction",
    "description": "Grants permission to create a self-service action",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createtagoption": {
    "name": "CreateTagOption",
    "description": "Grants permission to create a TagOption",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteapplication": {
    "name": "DeleteApplication",
    "description": "Grants permission to delete an application if all associations have been removed from the application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteattributegroup": {
    "name": "DeleteAttributeGroup",
    "description": "Grants permission to delete an attribute group if all associations have been removed from the attribute group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "AttributeGroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteconstraint": {
    "name": "DeleteConstraint",
    "description": "Grants permission to remove and delete an existing constraint from an associated product and portfolio",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteportfolio": {
    "name": "DeletePortfolio",
    "description": "Grants permission to delete a portfolio if all associations and shares have been removed from the portfolio",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteportfolioshare": {
    "name": "DeletePortfolioShare",
    "description": "Grants permission to unshare a portfolio you own from an AWS account you previously shared the portfolio with",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteproduct": {
    "name": "DeleteProduct",
    "description": "Grants permission to delete a product if all associations have been removed from the product",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteprovisionedproductplan": {
    "name": "DeleteProvisionedProductPlan",
    "description": "Grants permission to delete a provisioned product plan",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "deleteprovisioningartifact": {
    "name": "DeleteProvisioningArtifact",
    "description": "Grants permission to delete a provisioning artifact from a product",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteresourcepolicy": {
    "name": "DeleteResourcePolicy",
    "isPermissionOnly": true,
    "description": "Grants permission to delete a resource-based policy for the specified resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Application",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "AttributeGroup",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteserviceaction": {
    "name": "DeleteServiceAction",
    "description": "Grants permission to delete a self-service action",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetagoption": {
    "name": "DeleteTagOption",
    "description": "Grants permission to delete the specified TagOption",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeconstraint": {
    "name": "DescribeConstraint",
    "description": "Grants permission to describe a constraint",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describecopyproductstatus": {
    "name": "DescribeCopyProductStatus",
    "description": "Grants permission to get the status of the specified copy product operation",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeportfolio": {
    "name": "DescribePortfolio",
    "description": "Grants permission to describe a portfolio",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeportfoliosharestatus": {
    "name": "DescribePortfolioShareStatus",
    "description": "Grants permission to get the status of the specified portfolio share operation",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeportfolioshares": {
    "name": "DescribePortfolioShares",
    "description": "Grants permission to view a summary of each of the portfolio shares that were created for the specified portfolio",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeproduct": {
    "name": "DescribeProduct",
    "description": "Grants permission to describe a product as an end-user",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeproductasadmin": {
    "name": "DescribeProductAsAdmin",
    "description": "Grants permission to describe a product as an admin",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeproductview": {
    "name": "DescribeProductView",
    "description": "Grants permission to describe a product as an end-user",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeprovisionedproduct": {
    "name": "DescribeProvisionedProduct",
    "description": "Grants permission to describe a provisioned product",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "describeprovisionedproductplan": {
    "name": "DescribeProvisionedProductPlan",
    "description": "Grants permission to describe a provisioned product plan",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "describeprovisioningartifact": {
    "name": "DescribeProvisioningArtifact",
    "description": "Grants permission to describe a provisioning artifact",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeprovisioningparameters": {
    "name": "DescribeProvisioningParameters",
    "description": "Grants permission to describe the parameters that you need to specify to successfully provision a specified provisioning artifact",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describerecord": {
    "name": "DescribeRecord",
    "description": "Grants permission to describe a record and lists any outputs",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "describeserviceaction": {
    "name": "DescribeServiceAction",
    "description": "Grants permission to describe a self-service action",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeserviceactionexecutionparameters": {
    "name": "DescribeServiceActionExecutionParameters",
    "description": "Grants permission to get the default parameters if you executed the specified Service Action on the specified Provisioned Product",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "describetagoption": {
    "name": "DescribeTagOption",
    "description": "Grants permission to get information about the specified TagOption",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disableawsorganizationsaccess": {
    "name": "DisableAWSOrganizationsAccess",
    "description": "Grants permission to disable portfolio sharing through AWS Organizations feature",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociateattributegroup": {
    "name": "DisassociateAttributeGroup",
    "description": "Grants permission to disassociate an attribute group from an application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "AttributeGroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatebudgetfromresource": {
    "name": "DisassociateBudgetFromResource",
    "description": "Grants permission to disassociate a budget from a resource",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociateprincipalfromportfolio": {
    "name": "DisassociatePrincipalFromPortfolio",
    "description": "Grants permission to disassociate an IAM principal from a portfolio",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociateproductfromportfolio": {
    "name": "DisassociateProductFromPortfolio",
    "description": "Grants permission to disassociate a product from a portfolio",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociateresource": {
    "name": "DisassociateResource",
    "description": "Grants permission to disassociate a resource from an application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "resource-groups:DeleteGroup"
        ]
      }
    ],
    "conditionKeys": [
      "servicecatalog:ResourceType",
      "servicecatalog:Resource"
    ],
    "dependentActions": []
  },
  "disassociateserviceactionfromprovisioningartifact": {
    "name": "DisassociateServiceActionFromProvisioningArtifact",
    "description": "Grants permission to disassociate the specified self-service action association from the specified provisioning artifact",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatetagoptionfromresource": {
    "name": "DisassociateTagOptionFromResource",
    "description": "Grants permission to disassociate the specified TagOption from the specified resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Product",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "enableawsorganizationsaccess": {
    "name": "EnableAWSOrganizationsAccess",
    "description": "Grants permission to enable portfolio sharing feature through AWS Organizations",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "executeprovisionedproductplan": {
    "name": "ExecuteProvisionedProductPlan",
    "description": "Grants permission to execute a provisioned product plan",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "executeprovisionedproductserviceaction": {
    "name": "ExecuteProvisionedProductServiceAction",
    "description": "Grants permission to executes a provisioned product plan",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "getawsorganizationsaccessstatus": {
    "name": "GetAWSOrganizationsAccessStatus",
    "description": "Grants permission to get the access status of AWS Organization portfolio share feature",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getapplication": {
    "name": "GetApplication",
    "description": "Grants permission to get an application",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getassociatedresource": {
    "name": "GetAssociatedResource",
    "description": "Grants permission to get information about a resource associated to an application",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "servicecatalog:ResourceType",
      "servicecatalog:Resource"
    ],
    "dependentActions": []
  },
  "getattributegroup": {
    "name": "GetAttributeGroup",
    "description": "Grants permission to get an attribute group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "AttributeGroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getconfiguration": {
    "name": "GetConfiguration",
    "description": "Grants permission to read AppRegistry configurations",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getprovisionedproductoutputs": {
    "name": "GetProvisionedProductOutputs",
    "description": "Grants permission to get the provisioned product output with either provisioned product id or name",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getresourcepolicy": {
    "name": "GetResourcePolicy",
    "isPermissionOnly": true,
    "description": "Grants permission to get a resource-based policy for the specified resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Application",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "AttributeGroup",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "importasprovisionedproduct": {
    "name": "ImportAsProvisionedProduct",
    "description": "Grants permission to import a resource into a provisioned product",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listacceptedportfolioshares": {
    "name": "ListAcceptedPortfolioShares",
    "description": "Grants permission to list the portfolios that have been shared with you and you have accepted",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listapplications": {
    "name": "ListApplications",
    "description": "Grants permission to list your applications",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listassociatedattributegroups": {
    "name": "ListAssociatedAttributeGroups",
    "description": "Grants permission to list the attribute groups associated with an application",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listassociatedresources": {
    "name": "ListAssociatedResources",
    "description": "Grants permission to list the resources associated with an application",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listattributegroups": {
    "name": "ListAttributeGroups",
    "description": "Grants permission to list your attribute groups",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listattributegroupsforapplication": {
    "name": "ListAttributeGroupsForApplication",
    "description": "Grants permission to list the associated attribute groups for a given application",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listbudgetsforresource": {
    "name": "ListBudgetsForResource",
    "description": "Grants permission to list all the budgets associated to a resource",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listconstraintsforportfolio": {
    "name": "ListConstraintsForPortfolio",
    "description": "Grants permission to list constraints associated with a given portfolio",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listlaunchpaths": {
    "name": "ListLaunchPaths",
    "description": "Grants permission to list the different ways to launch a given product as an end-user",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listorganizationportfolioaccess": {
    "name": "ListOrganizationPortfolioAccess",
    "description": "Grants permission to list the organization nodes that have access to the specified portfolio",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listportfolioaccess": {
    "name": "ListPortfolioAccess",
    "description": "Grants permission to list the AWS accounts you have shared a given portfolio with",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listportfolios": {
    "name": "ListPortfolios",
    "description": "Grants permission to list the portfolios in your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listportfoliosforproduct": {
    "name": "ListPortfoliosForProduct",
    "description": "Grants permission to list the portfolios associated with a given product",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprincipalsforportfolio": {
    "name": "ListPrincipalsForPortfolio",
    "description": "Grants permission to list the IAM principals associated with a given portfolio",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprovisionedproductplans": {
    "name": "ListProvisionedProductPlans",
    "description": "Grants permission to list the provisioned product plans",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "listprovisioningartifacts": {
    "name": "ListProvisioningArtifacts",
    "description": "Grants permission to list the provisioning artifacts associated with a given product",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listprovisioningartifactsforserviceaction": {
    "name": "ListProvisioningArtifactsForServiceAction",
    "description": "Grants permission to list all provisioning artifacts for the specified self-service action",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listrecordhistory": {
    "name": "ListRecordHistory",
    "description": "Grants permission to list all the records in your account or all the records related to a given provisioned product",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "listresourcesfortagoption": {
    "name": "ListResourcesForTagOption",
    "description": "Grants permission to list the resources associated with the specified TagOption",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listserviceactions": {
    "name": "ListServiceActions",
    "description": "Grants permission to list all self-service actions",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listserviceactionsforprovisioningartifact": {
    "name": "ListServiceActionsForProvisioningArtifact",
    "description": "Grants permission to list all the service actions associated with the specified provisioning artifact in your account",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "liststackinstancesforprovisionedproduct": {
    "name": "ListStackInstancesForProvisionedProduct",
    "description": "Grants permission to list account, region and status of each stack instances that are associated with a CFN_STACKSET type provisioned product",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "listtagoptions": {
    "name": "ListTagOptions",
    "description": "Grants permission to list the specified TagOptions or all TagOptions",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list the tags for a service catalog appregistry resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Application",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "AttributeGroup",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "notifyprovisionproductengineworkflowresult": {
    "name": "NotifyProvisionProductEngineWorkflowResult",
    "description": "Grants permission to notify the result of the provisioning engine execution",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "notifyterminateprovisionedproductengineworkflowresult": {
    "name": "NotifyTerminateProvisionedProductEngineWorkflowResult",
    "description": "Grants permission to notify the result of the terminate engine execution",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "notifyupdateprovisionedproductengineworkflowresult": {
    "name": "NotifyUpdateProvisionedProductEngineWorkflowResult",
    "description": "Grants permission to notify the result of the update engine execution",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "provisionproduct": {
    "name": "ProvisionProduct",
    "description": "Grants permission to provision a product with a specified provisioning artifact and launch parameters",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putconfiguration": {
    "name": "PutConfiguration",
    "description": "Grants permission to assign AppRegistry configurations",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putresourcepolicy": {
    "name": "PutResourcePolicy",
    "isPermissionOnly": true,
    "description": "Grants permission to add a resource-based policy for the specified resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Application",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "AttributeGroup",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "rejectportfolioshare": {
    "name": "RejectPortfolioShare",
    "description": "Grants permission to reject a portfolio that has been shared with you that you previously accepted",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "scanprovisionedproducts": {
    "name": "ScanProvisionedProducts",
    "description": "Grants permission to list all the provisioned products in your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "searchproducts": {
    "name": "SearchProducts",
    "description": "Grants permission to list the products available to you as an end-user",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "searchproductsasadmin": {
    "name": "SearchProductsAsAdmin",
    "description": "Grants permission to list all the products in your account or all the products associated with a given portfolio",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "searchprovisionedproducts": {
    "name": "SearchProvisionedProducts",
    "description": "Grants permission to list all the provisioned products in your account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "syncresource": {
    "name": "SyncResource",
    "description": "Grants permission to sync a resource with its current state in AppRegistry",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "cloudformation:UpdateStack"
    ]
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to tag a service catalog appregistry resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Application",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "AttributeGroup",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "terminateprovisionedproduct": {
    "name": "TerminateProvisionedProduct",
    "description": "Grants permission to terminate an existing provisioned product",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove a tag from a service catalog appregistry resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Application",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "AttributeGroup",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateapplication": {
    "name": "UpdateApplication",
    "description": "Grants permission to update the attributes of an existing application",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Application",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "iam:CreateServiceLinkedRole"
    ]
  },
  "updateattributegroup": {
    "name": "UpdateAttributeGroup",
    "description": "Grants permission to update the attributes of an existing attribute group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "AttributeGroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateconstraint": {
    "name": "UpdateConstraint",
    "description": "Grants permission to update the metadata fields of an existing constraint",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateportfolio": {
    "name": "UpdatePortfolio",
    "description": "Grants permission to update the metadata fields and/or tags of an existing portfolio",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateportfolioshare": {
    "name": "UpdatePortfolioShare",
    "description": "Grants permission to enable or disable resource sharing for an existing portfolio share",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "Portfolio",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateproduct": {
    "name": "UpdateProduct",
    "description": "Grants permission to update the metadata fields and/or tags of an existing product",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateprovisionedproduct": {
    "name": "UpdateProvisionedProduct",
    "description": "Grants permission to update an existing provisioned product",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "servicecatalog:accountLevel",
      "servicecatalog:roleLevel",
      "servicecatalog:userLevel"
    ],
    "dependentActions": []
  },
  "updateprovisionedproductproperties": {
    "name": "UpdateProvisionedProductProperties",
    "description": "Grants permission to update the properties of an existing provisioned product",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateprovisioningartifact": {
    "name": "UpdateProvisioningArtifact",
    "description": "Grants permission to update the metadata fields of an existing provisioning artifact",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Product",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateserviceaction": {
    "name": "UpdateServiceAction",
    "description": "Grants permission to update a self-service action",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatetagoption": {
    "name": "UpdateTagOption",
    "description": "Grants permission to update the specified TagOption",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  }
}