{
  "acceptaccountlinkinvitation": {
    "name": "AcceptAccountLinkInvitation",
    "description": "Grants permission to accept invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associateconnectionalias": {
    "name": "AssociateConnectionAlias",
    "description": "Grants permission to associate connection aliases with directories",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "connectionalias",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associateipgroups": {
    "name": "AssociateIpGroups",
    "description": "Grants permission to associate IP access control groups with directories",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspaceipgroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "associateworkspaceapplication": {
    "name": "AssociateWorkspaceApplication",
    "description": "Grants permission to associate a workspace application with a WorkSpace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceapplication",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "authorizeiprules": {
    "name": "AuthorizeIpRules",
    "description": "Grants permission to add rules to IP access control groups",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceipgroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "workspaces:UpdateRulesOfIpGroup"
    ]
  },
  "copyworkspaceimage": {
    "name": "CopyWorkspaceImage",
    "description": "Grants permission to copy a WorkSpace image",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceimage",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "workspaces:DescribeWorkspaceImages"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createaccountlinkinvitation": {
    "name": "CreateAccountLinkInvitation",
    "description": "Grants permission to invite other AWS accounts to share the same configuration for WorkSpaces BYOL",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createconnectclientaddin": {
    "name": "CreateConnectClientAddIn",
    "description": "Grants permission to create an Amazon Connect client add-in within a directory",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createconnectionalias": {
    "name": "CreateConnectionAlias",
    "description": "Grants permission to create connection aliases for use with cross-Region redirection",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createipgroup": {
    "name": "CreateIpGroup",
    "description": "Grants permission to create IP access control groups",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createstandbyworkspaces": {
    "name": "CreateStandbyWorkspaces",
    "description": "Grants permission to create one or more Standby WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createtags": {
    "name": "CreateTags",
    "description": "Grants permission to create tags for WorkSpaces resources",
    "accessLevel": "Tagging",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createupdatedworkspaceimage": {
    "name": "CreateUpdatedWorkspaceImage",
    "description": "Grants permission to create an updated WorkSpace image",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceimage",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createworkspacebundle": {
    "name": "CreateWorkspaceBundle",
    "description": "Grants permission to create a WorkSpace bundle",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspacebundle",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "workspaces:CreateTags"
        ]
      },
      {
        "name": "workspaceimage",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createworkspaceimage": {
    "name": "CreateWorkspaceImage",
    "description": "Grants permission to create a new WorkSpace image",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createworkspaces": {
    "name": "CreateWorkspaces",
    "description": "Grants permission to create one or more WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspacebundle",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createworkspacespool": {
    "name": "CreateWorkspacesPool",
    "description": "Grants permission to create a WorkSpaces Pool",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspacebundle",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspacespoolid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deleteaccountlinkinvitation": {
    "name": "DeleteAccountLinkInvitation",
    "description": "Grants permission to delete invitations to other AWS accounts to share the same configuration for WorkSpaces BYOL",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteclientbranding": {
    "name": "DeleteClientBranding",
    "description": "Grants permission to delete AWS WorkSpaces Client branding data within a directory",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteconnectclientaddin": {
    "name": "DeleteConnectClientAddIn",
    "description": "Grants permission to delete an Amazon Connect client add-in that is configured within a directory",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteconnectionalias": {
    "name": "DeleteConnectionAlias",
    "description": "Grants permission to delete connection aliases",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "connectionalias",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteipgroup": {
    "name": "DeleteIpGroup",
    "description": "Grants permission to delete IP access control groups",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceipgroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetags": {
    "name": "DeleteTags",
    "description": "Grants permission to delete tags from WorkSpaces resources",
    "accessLevel": "Tagging",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deleteworkspacebundle": {
    "name": "DeleteWorkspaceBundle",
    "description": "Grants permission to delete WorkSpace bundles",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspacebundle",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteworkspaceimage": {
    "name": "DeleteWorkspaceImage",
    "description": "Grants permission to delete WorkSpace images",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceimage",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deployworkspaceapplications": {
    "name": "DeployWorkspaceApplications",
    "description": "Grants permission to deploy all pending workspace applications on a WorkSpace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "deregisterworkspacedirectory": {
    "name": "DeregisterWorkspaceDirectory",
    "description": "Grants permission to deregister directories from use with Amazon WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeaccount": {
    "name": "DescribeAccount",
    "description": "Grants permission to retrieve the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeaccountmodifications": {
    "name": "DescribeAccountModifications",
    "description": "Grants permission to retrieve modifications to the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeapplicationassociations": {
    "name": "DescribeApplicationAssociations",
    "description": "Grants permission to retrieve information about resources associated with a WorkSpace application",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspaceapplication",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describeapplications": {
    "name": "DescribeApplications",
    "description": "Grants permission to obtain information about WorkSpace applications",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describebundleassociations": {
    "name": "DescribeBundleAssociations",
    "description": "Grants permission to retrieve information about resources associated with a WorkSpace bundle",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspacebundle",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describeclientbranding": {
    "name": "DescribeClientBranding",
    "description": "Grants permission to retrieve AWS WorkSpaces Client branding data within a directory",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeclientproperties": {
    "name": "DescribeClientProperties",
    "description": "Grants permission to retrieve information about WorkSpaces clients",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeconnectclientaddins": {
    "name": "DescribeConnectClientAddIns",
    "description": "Grants permission to retrieve a list of Amazon Connect client add-ins that have been created",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeconnectionaliaspermissions": {
    "name": "DescribeConnectionAliasPermissions",
    "description": "Grants permission to retrieve the permissions that the owners of connection aliases have granted to other AWS accounts for connection aliases",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "connectionalias",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeconnectionaliases": {
    "name": "DescribeConnectionAliases",
    "description": "Grants permission to retrieve a list that describes the connection aliases used for cross-Region redirection",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeimageassociations": {
    "name": "DescribeImageAssociations",
    "description": "Grants permission to retrieve information about resources associated with a WorkSpace image",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspaceimage",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describeipgroups": {
    "name": "DescribeIpGroups",
    "description": "Grants permission to retrieve information about IP access control groups",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspaceipgroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describetags": {
    "name": "DescribeTags",
    "description": "Grants permission to describe the tags for WorkSpaces resources",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspaceassociations": {
    "name": "DescribeWorkspaceAssociations",
    "description": "Grants permission to retrieve information about resources associated with a WorkSpace",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "describeworkspacebundles": {
    "name": "DescribeWorkspaceBundles",
    "description": "Grants permission to obtain information about WorkSpace bundles",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspacedirectories": {
    "name": "DescribeWorkspaceDirectories",
    "description": "Grants permission to retrieve information about directories that are registered with WorkSpaces",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspaceimagepermissions": {
    "name": "DescribeWorkspaceImagePermissions",
    "description": "Grants permission to retrieve information about WorkSpace image permissions",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "workspaceimage",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspaceimages": {
    "name": "DescribeWorkspaceImages",
    "description": "Grants permission to retrieve information about WorkSpace images",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspacesnapshots": {
    "name": "DescribeWorkspaceSnapshots",
    "description": "Grants permission to retrieve information about WorkSpace snapshots",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspaces": {
    "name": "DescribeWorkspaces",
    "description": "Grants permission to obtain information about WorkSpaces",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspacesconnectionstatus": {
    "name": "DescribeWorkspacesConnectionStatus",
    "description": "Grants permission to obtain the connection status of WorkSpaces",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspacespoolsessions": {
    "name": "DescribeWorkspacesPoolSessions",
    "description": "Grants permission to retrieve information about the sessions of a WorkSpaces Pool",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "workspacespoolid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeworkspacespools": {
    "name": "DescribeWorkspacesPools",
    "description": "Grants permission to retrieve information about WorkSpaces Pools",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociateconnectionalias": {
    "name": "DisassociateConnectionAlias",
    "description": "Grants permission to disassociate connection aliases from directories",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "connectionalias",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociateipgroups": {
    "name": "DisassociateIpGroups",
    "description": "Grants permission to disassociate IP access control groups from directories",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspaceipgroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "disassociateworkspaceapplication": {
    "name": "DisassociateWorkspaceApplication",
    "description": "Grants permission to disassociate a workspace application from a WorkSpace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceapplication",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "getaccountlink": {
    "name": "GetAccountLink",
    "description": "Grants permission to retrieve a link with another AWS Account for sharing configuration for WorkSpaces BYOL",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "importclientbranding": {
    "name": "ImportClientBranding",
    "description": "Grants permission to import AWS WorkSpaces Client branding data within a directory",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "importworkspaceimage": {
    "name": "ImportWorkspaceImage",
    "description": "Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": [
      "ec2:DescribeImages",
      "ec2:ModifyImageAttribute"
    ]
  },
  "listaccountlinks": {
    "name": "ListAccountLinks",
    "description": "Grants permission to retrieve links with the AWS Account(s) that share your configuration for WorkSpaces BYOL",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listavailablemanagementcidrranges": {
    "name": "ListAvailableManagementCidrRanges",
    "description": "Grants permission to list the available CIDR ranges for enabling Bring Your Own License (BYOL) for WorkSpaces accounts",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "migrateworkspace": {
    "name": "MigrateWorkspace",
    "description": "Grants permission to migrate WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspacebundle",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifyaccount": {
    "name": "ModifyAccount",
    "description": "Grants permission to modify the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifycertificatebasedauthproperties": {
    "name": "ModifyCertificateBasedAuthProperties",
    "description": "Grants permission to modify the certificate-based authorization properties of a directory",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifyclientproperties": {
    "name": "ModifyClientProperties",
    "description": "Grants permission to modify the properties of WorkSpaces clients",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifyendpointencryptionmode": {
    "name": "ModifyEndpointEncryptionMode",
    "description": "Grants permission to configure the specified directory between Standard TLS and FIPS 140-2 validated mode",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifysamlproperties": {
    "name": "ModifySamlProperties",
    "description": "Grants permission to modify the SAML properties of a directory",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifyselfservicepermissions": {
    "name": "ModifySelfservicePermissions",
    "description": "Grants permission to modify the self-service WorkSpace management capabilities for your users",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifystreamingproperties": {
    "name": "ModifyStreamingProperties",
    "description": "Grants permission to modify the streaming properties",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifyworkspaceaccessproperties": {
    "name": "ModifyWorkspaceAccessProperties",
    "description": "Grants permission to specify which devices and operating systems users can use to access their WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifyworkspacecreationproperties": {
    "name": "ModifyWorkspaceCreationProperties",
    "description": "Grants permission to modify the default properties used to create WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifyworkspaceproperties": {
    "name": "ModifyWorkspaceProperties",
    "description": "Grants permission to modify WorkSpace properties, including the running mode and the AutoStop period",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "modifyworkspacestate": {
    "name": "ModifyWorkspaceState",
    "description": "Grants permission to modify the state of WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "rebootworkspaces": {
    "name": "RebootWorkspaces",
    "description": "Grants permission to reboot WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "rebuildworkspaces": {
    "name": "RebuildWorkspaces",
    "description": "Grants permission to rebuild WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "registerworkspacedirectory": {
    "name": "RegisterWorkspaceDirectory",
    "description": "Grants permission to register directories for use with Amazon WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "rejectaccountlinkinvitation": {
    "name": "RejectAccountLinkInvitation",
    "description": "Grants permission to reject invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "restoreworkspace": {
    "name": "RestoreWorkspace",
    "description": "Grants permission to restore WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "revokeiprules": {
    "name": "RevokeIpRules",
    "description": "Grants permission to remove rules from IP access control groups",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceipgroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "workspaces:UpdateRulesOfIpGroup"
    ]
  },
  "startworkspaces": {
    "name": "StartWorkspaces",
    "description": "Grants permission to start AutoStop WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startworkspacespool": {
    "name": "StartWorkspacesPool",
    "description": "Grants permission to start a WorkSpaces Pool",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspacespoolid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stopworkspaces": {
    "name": "StopWorkspaces",
    "description": "Grants permission to stop AutoStop WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stopworkspacespool": {
    "name": "StopWorkspacesPool",
    "description": "Grants permission to stop a WorkSpaces Pool",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspacespoolid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "stream": {
    "name": "Stream",
    "description": "Grants permission to federated users to sign in by using their existing credentials and stream their workspace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "workspaces:userId"
    ],
    "dependentActions": []
  },
  "terminateworkspaces": {
    "name": "TerminateWorkspaces",
    "description": "Grants permission to terminate WorkSpaces",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "terminateworkspacespool": {
    "name": "TerminateWorkspacesPool",
    "description": "Grants permission to terminate a WorkSpaces Pool",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspacespoolid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "terminateworkspacespoolsession": {
    "name": "TerminateWorkspacesPoolSession",
    "description": "Grants permission to terminate a WorkSpaces Pool session",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateconnectclientaddin": {
    "name": "UpdateConnectClientAddIn",
    "description": "Grants permission to update an Amazon Connect client add-in. Use this action to update the name and endpoint URL of an Amazon Connect client add-in",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "directoryid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateconnectionaliaspermission": {
    "name": "UpdateConnectionAliasPermission",
    "description": "Grants permission to share or unshare connection aliases with other accounts",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "connectionalias",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updaterulesofipgroup": {
    "name": "UpdateRulesOfIpGroup",
    "description": "Grants permission to replace rules for IP access control groups",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspaceipgroup",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "workspaces:AuthorizeIpRules",
      "workspaces:RevokeIpRules"
    ]
  },
  "updateworkspacebundle": {
    "name": "UpdateWorkspaceBundle",
    "description": "Grants permission to update the WorkSpace images used in WorkSpace bundles",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspacebundle",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "workspaceimage",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateworkspaceimagepermission": {
    "name": "UpdateWorkspaceImagePermission",
    "description": "Grants permission to share or unshare WorkSpace images with other accounts by specifying whether other accounts have permission to copy the image",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "workspaceimage",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateworkspacespool": {
    "name": "UpdateWorkspacesPool",
    "description": "Grants permission to update the WorkSpaces pool",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "workspacespoolid",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}