{
  "associatewebacl": {
    "name": "AssociateWebACL",
    "description": "Grants permission to associate a web ACL with a resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "loadbalancer/app/",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createbytematchset": {
    "name": "CreateByteMatchSet",
    "description": "Grants permission to create a ByteMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "bytematchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "creategeomatchset": {
    "name": "CreateGeoMatchSet",
    "description": "Grants permission to create a GeoMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "geomatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createipset": {
    "name": "CreateIPSet",
    "description": "Grants permission to create an IPSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ipset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createratebasedrule": {
    "name": "CreateRateBasedRule",
    "description": "Grants permission to create a RateBasedRule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ratebasedrule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createregexmatchset": {
    "name": "CreateRegexMatchSet",
    "description": "Grants permission to create a RegexMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "regexmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createregexpatternset": {
    "name": "CreateRegexPatternSet",
    "description": "Grants permission to create a RegexPatternSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "regexpatternset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createrule": {
    "name": "CreateRule",
    "description": "Grants permission to create a Rule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createrulegroup": {
    "name": "CreateRuleGroup",
    "description": "Grants permission to create a RuleGroup",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rulegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createsizeconstraintset": {
    "name": "CreateSizeConstraintSet",
    "description": "Grants permission to create a SizeConstraintSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "sizeconstraintset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createsqlinjectionmatchset": {
    "name": "CreateSqlInjectionMatchSet",
    "description": "Grants permission to create an SqlInjectionMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "sqlinjectionmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createwebacl": {
    "name": "CreateWebACL",
    "description": "Grants permission to create a WebACL",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createwebaclmigrationstack": {
    "name": "CreateWebACLMigrationStack",
    "description": "Grants permission to create a CloudFormation web ACL template in an S3 bucket for the purposes of migrating the web ACL from AWS WAF Classic to AWS WAF v2",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "s3:PutObject"
    ]
  },
  "createxssmatchset": {
    "name": "CreateXssMatchSet",
    "description": "Grants permission to create an XssMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "xssmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletebytematchset": {
    "name": "DeleteByteMatchSet",
    "description": "Grants permission to delete a ByteMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "bytematchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletegeomatchset": {
    "name": "DeleteGeoMatchSet",
    "description": "Grants permission to delete a GeoMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "geomatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteipset": {
    "name": "DeleteIPSet",
    "description": "Grants permission to delete an IPSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ipset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteloggingconfiguration": {
    "name": "DeleteLoggingConfiguration",
    "description": "Grants permission to delete a LoggingConfiguration from a web ACL",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletepermissionpolicy": {
    "name": "DeletePermissionPolicy",
    "description": "Grants permission to delete an IAM policy from a rule group",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "rulegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteratebasedrule": {
    "name": "DeleteRateBasedRule",
    "description": "Grants permission to delete a RateBasedRule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ratebasedrule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteregexmatchset": {
    "name": "DeleteRegexMatchSet",
    "description": "Grants permission to delete a RegexMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "regexmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteregexpatternset": {
    "name": "DeleteRegexPatternSet",
    "description": "Grants permission to delete a RegexPatternSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "regexpatternset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleterule": {
    "name": "DeleteRule",
    "description": "Grants permission to delete a Rule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleterulegroup": {
    "name": "DeleteRuleGroup",
    "description": "Grants permission to delete a RuleGroup",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rulegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletesizeconstraintset": {
    "name": "DeleteSizeConstraintSet",
    "description": "Grants permission to delete a SizeConstraintSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "sizeconstraintset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletesqlinjectionmatchset": {
    "name": "DeleteSqlInjectionMatchSet",
    "description": "Grants permission to delete an SqlInjectionMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "sqlinjectionmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletewebacl": {
    "name": "DeleteWebACL",
    "description": "Grants permission to delete a WebACL",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletexssmatchset": {
    "name": "DeleteXssMatchSet",
    "description": "Grants permission to delete an XssMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "xssmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociatewebacl": {
    "name": "DisassociateWebACL",
    "description": "Grants permission to delete an association between a web ACL and a resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "loadbalancer/app/",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getbytematchset": {
    "name": "GetByteMatchSet",
    "description": "Grants permission to retrieve a ByteMatchSet",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "bytematchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getchangetoken": {
    "name": "GetChangeToken",
    "description": "Grants permission to retrieve a change token to use in create, update, and delete requests",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getchangetokenstatus": {
    "name": "GetChangeTokenStatus",
    "description": "Grants permission to retrieve the status of a change token",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getgeomatchset": {
    "name": "GetGeoMatchSet",
    "description": "Grants permission to retrieve a GeoMatchSet",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "geomatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getipset": {
    "name": "GetIPSet",
    "description": "Grants permission to retrieve an IPSet",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ipset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getloggingconfiguration": {
    "name": "GetLoggingConfiguration",
    "description": "Grants permission to retrieve a LoggingConfiguration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getpermissionpolicy": {
    "name": "GetPermissionPolicy",
    "description": "Grants permission to retrieve an IAM policy attached to a RuleGroup",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "rulegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getratebasedrule": {
    "name": "GetRateBasedRule",
    "description": "Grants permission to retrieve a RateBasedRule",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ratebasedrule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getratebasedrulemanagedkeys": {
    "name": "GetRateBasedRuleManagedKeys",
    "description": "Grants permission to retrieve the array of IP addresses that are currently being blocked by a RateBasedRule",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ratebasedrule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getregexmatchset": {
    "name": "GetRegexMatchSet",
    "description": "Grants permission to retrieve a RegexMatchSet",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "regexmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getregexpatternset": {
    "name": "GetRegexPatternSet",
    "description": "Grants permission to retrieve a RegexPatternSet",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "regexpatternset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getrule": {
    "name": "GetRule",
    "description": "Grants permission to retrieve a Rule",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "rule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getrulegroup": {
    "name": "GetRuleGroup",
    "description": "Grants permission to retrieve a RuleGroup",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "rulegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getsampledrequests": {
    "name": "GetSampledRequests",
    "description": "Grants permission to retrieve detailed information for a sample set of web requests",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getsizeconstraintset": {
    "name": "GetSizeConstraintSet",
    "description": "Grants permission to retrieve a SizeConstraintSet",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "sizeconstraintset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getsqlinjectionmatchset": {
    "name": "GetSqlInjectionMatchSet",
    "description": "Grants permission to retrieve an SqlInjectionMatchSet",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "sqlinjectionmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getwebacl": {
    "name": "GetWebACL",
    "description": "Grants permission to retrieve a WebACL",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getwebaclforresource": {
    "name": "GetWebACLForResource",
    "description": "Grants permission to retrieve a WebACL that's associated with a specified resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "loadbalancer/app/",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getxssmatchset": {
    "name": "GetXssMatchSet",
    "description": "Grants permission to retrieve an XssMatchSet",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "xssmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listactivatedrulesinrulegroup": {
    "name": "ListActivatedRulesInRuleGroup",
    "description": "Grants permission to retrieve an array of ActivatedRule objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listbytematchsets": {
    "name": "ListByteMatchSets",
    "description": "Grants permission to retrieve an array of ByteMatchSetSummary objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listgeomatchsets": {
    "name": "ListGeoMatchSets",
    "description": "Grants permission to retrieve an array of GeoMatchSetSummary objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listipsets": {
    "name": "ListIPSets",
    "description": "Grants permission to retrieve an array of IPSetSummary objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listloggingconfigurations": {
    "name": "ListLoggingConfigurations",
    "description": "Grants permission to retrieve an array of LoggingConfiguration objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listratebasedrules": {
    "name": "ListRateBasedRules",
    "description": "Grants permission to retrieve an array of RuleSummary objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listregexmatchsets": {
    "name": "ListRegexMatchSets",
    "description": "Grants permission to retrieve an array of RegexMatchSetSummary objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listregexpatternsets": {
    "name": "ListRegexPatternSets",
    "description": "Grants permission to retrieve an array of RegexPatternSetSummary objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listresourcesforwebacl": {
    "name": "ListResourcesForWebACL",
    "description": "Grants permission to retrieve an array of resources associated with a specified WebACL",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listrulegroups": {
    "name": "ListRuleGroups",
    "description": "Grants permission to retrieve an array of RuleGroup objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listrules": {
    "name": "ListRules",
    "description": "Grants permission to retrieve an array of RuleSummary objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsizeconstraintsets": {
    "name": "ListSizeConstraintSets",
    "description": "Grants permission to retrieve an array of SizeConstraintSetSummary objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsqlinjectionmatchsets": {
    "name": "ListSqlInjectionMatchSets",
    "description": "Grants permission to retrieve an array of SqlInjectionMatchSet objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsubscribedrulegroups": {
    "name": "ListSubscribedRuleGroups",
    "description": "Grants permission to retrieve an array of RuleGroup objects that you are subscribed to",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to lists the Tags for a resource",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ratebasedrule",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "rule",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "rulegroup",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "webacl",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listwebacls": {
    "name": "ListWebACLs",
    "description": "Grants permission to retrieve an array of WebACLSummary objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listxssmatchsets": {
    "name": "ListXssMatchSets",
    "description": "Grants permission to retrieve an array of XssMatchSet objects",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "putloggingconfiguration": {
    "name": "PutLoggingConfiguration",
    "description": "Grants permission to associates a LoggingConfiguration with a web ACL",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "iam:CreateServiceLinkedRole"
    ]
  },
  "putpermissionpolicy": {
    "name": "PutPermissionPolicy",
    "description": "Grants permission to attach an IAM policy to a specified rule group, to support rule group sharing between accounts",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "rulegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to add a Tag to a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "ratebasedrule",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "rule",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "rulegroup",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "webacl",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove a Tag from a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "ratebasedrule",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "rule",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "rulegroup",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "webacl",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updatebytematchset": {
    "name": "UpdateByteMatchSet",
    "description": "Grants permission to insert or delete ByteMatchTuple objects in a ByteMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "bytematchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updategeomatchset": {
    "name": "UpdateGeoMatchSet",
    "description": "Grants permission to insert or delete GeoMatchConstraint objects in a GeoMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "geomatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateipset": {
    "name": "UpdateIPSet",
    "description": "Grants permission to insert or delete IPSetDescriptor objects in an IPSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ipset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateratebasedrule": {
    "name": "UpdateRateBasedRule",
    "description": "Grants permission to insert or delete predicate objects in a rate based rule and update the RateLimit in the rule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ratebasedrule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateregexmatchset": {
    "name": "UpdateRegexMatchSet",
    "description": "Grants permission to insert or delete RegexMatchTuple objects in a RegexMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "regexmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateregexpatternset": {
    "name": "UpdateRegexPatternSet",
    "description": "Grants permission to insert or delete RegexPatternStrings in a RegexPatternSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "regexpatternset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updaterule": {
    "name": "UpdateRule",
    "description": "Grants permission to insert or delete predicate objects in a Rule",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updaterulegroup": {
    "name": "UpdateRuleGroup",
    "description": "Grants permission to insert or delete ActivatedRule objects in a RuleGroup",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "rulegroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatesizeconstraintset": {
    "name": "UpdateSizeConstraintSet",
    "description": "Grants permission to insert or delete SizeConstraint objects in a SizeConstraintSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "sizeconstraintset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatesqlinjectionmatchset": {
    "name": "UpdateSqlInjectionMatchSet",
    "description": "Grants permission to insert or delete SqlInjectionMatchTuple objects in an SqlInjectionMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "sqlinjectionmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatewebacl": {
    "name": "UpdateWebACL",
    "description": "Grants permission to insert or delete ActivatedRule objects in a WebACL",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "webacl",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatexssmatchset": {
    "name": "UpdateXssMatchSet",
    "description": "Grants permission to insert or delete XssMatchTuple objects in an XssMatchSet",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "xssmatchset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}