@actsecurity/iam-data 0.21.202608301

package/data/actions/rds.json

@@ -0,0 +1,3566 @@
+{
+  "copycustomdbengineversion": {
+    "name": "CopyCustomDBEngineVersion",
+    "description": "Grants permission to copy a custom engine version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cev",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "crossregioncommunication": {
+    "name": "CrossRegionCommunication",
+    "description": "Grants permission to access a resource in the remote Region when executing cross-Region operations, such as cross-Region snapshot copy or cross-Region read replica creation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describerecommendationgroups": {
+    "name": "DescribeRecommendationGroups",
+    "description": "Grants permission to return information about recommendation groups",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describerecommendations": {
+    "name": "DescribeRecommendations",
+    "description": "Grants permission to return information about recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyrecommendation": {
+    "name": "ModifyRecommendation",
+    "description": "Grants permission to modify recommendation",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "addroletodbcluster": {
+    "name": "AddRoleToDBCluster",
+    "description": "Grants permission to associate an Identity and Access Management (IAM) role from an Aurora DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "addroletodbinstance": {
+    "name": "AddRoleToDBInstance",
+    "description": "Grants permission to associate an AWS Identity and Access Management (IAM) role with a DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "addsourceidentifiertosubscription": {
+    "name": "AddSourceIdentifierToSubscription",
+    "description": "Grants permission to add a source identifier to an existing RDS event notification subscription",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "es",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "addtagstoresource": {
+    "name": "AddTagsToResource",
+    "description": "Grants permission to add metadata tags to an Amazon RDS resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cev",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "deployment",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "es",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "proxy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "proxy-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ri",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "secgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot-tenant-database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "target-group",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tenant-database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:TagsFromRequest",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "applypendingmaintenanceaction": {
+    "name": "ApplyPendingMaintenanceAction",
+    "description": "Grants permission to apply a pending maintenance action to a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "authorizedbsecuritygroupingress": {
+    "name": "AuthorizeDBSecurityGroupIngress",
+    "description": "Grants permission to enable ingress to a DBSecurityGroup using one of two forms of authorization",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "secgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "backtrackdbcluster": {
+    "name": "BacktrackDBCluster",
+    "description": "Grants permission to backtrack a DB cluster to a specific time, without creating a new DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelexporttask": {
+    "name": "CancelExportTask",
+    "description": "Grants permission to cancel an export task in progress",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "copydbclusterparametergroup": {
+    "name": "CopyDBClusterParameterGroup",
+    "description": "Grants permission to copy the specified DB cluster parameter group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "copydbclustersnapshot": {
+    "name": "CopyDBClusterSnapshot",
+    "description": "Grants permission to create a snapshot of a DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "copydbparametergroup": {
+    "name": "CopyDBParameterGroup",
+    "description": "Grants permission to copy the specified DB parameter group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "copydbsnapshot": {
+    "name": "CopyDBSnapshot",
+    "description": "Grants permission to copy the specified DB snapshot",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:CopyOptionGroup",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "copyoptiongroup": {
+    "name": "CopyOptionGroup",
+    "description": "Grants permission to copy the specified option group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createbluegreendeployment": {
+    "name": "CreateBlueGreenDeployment",
+    "description": "Grants permission to create a blue-green deployment for a given source cluster or instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "deployment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:DatabaseClass",
+      "rds:DatabaseEngine",
+      "rds:DatabaseName",
+      "rds:MultiAz",
+      "rds:Piops",
+      "rds:StorageEncrypted",
+      "rds:StorageSize",
+      "rds:Vpc",
+      "rds:cluster-pg-tag/${TagKey}",
+      "rds:cluster-tag/${TagKey}",
+      "rds:db-tag/${TagKey}",
+      "rds:pg-tag/${TagKey}",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createcustomdbengineversion": {
+    "name": "CreateCustomDBEngineVersion",
+    "description": "Grants permission to create a custom engine version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cev",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbcluster": {
+    "name": "CreateDBCluster",
+    "description": "Grants permission to create a new DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:DatabaseClass",
+      "rds:DatabaseEngine",
+      "rds:DatabaseName",
+      "rds:ManageMasterUserPassword",
+      "rds:Piops",
+      "rds:StorageEncrypted",
+      "rds:StorageSize",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbclusterendpoint": {
+    "name": "CreateDBClusterEndpoint",
+    "description": "Grants permission to create a new custom endpoint and associates it with an Amazon Aurora DB cluster or Amazon DocumentDB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:EndpointType",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbclusterparametergroup": {
+    "name": "CreateDBClusterParameterGroup",
+    "description": "Grants permission to create a new DB cluster parameter group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbclustersnapshot": {
+    "name": "CreateDBClusterSnapshot",
+    "description": "Grants permission to create a snapshot of a DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbinstance": {
+    "name": "CreateDBInstance",
+    "description": "Grants permission to create a new DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "secgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:BackupTarget",
+      "rds:ManageMasterUserPassword",
+      "rds:PubliclyAccessible",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbinstancereadreplica": {
+    "name": "CreateDBInstanceReadReplica",
+    "description": "Grants permission to create a DB instance that acts as a Read Replica of a source DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:PubliclyAccessible",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbparametergroup": {
+    "name": "CreateDBParameterGroup",
+    "description": "Grants permission to create a new DB parameter group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbproxy": {
+    "name": "CreateDBProxy",
+    "description": "Grants permission to create a database proxy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createdbproxyendpoint": {
+    "name": "CreateDBProxyEndpoint",
+    "description": "Grants permission to create a database proxy endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "proxy-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createdbsecuritygroup": {
+    "name": "CreateDBSecurityGroup",
+    "description": "Grants permission to create a new DB security group. DB security groups control access to a DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "secgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbshardgroup": {
+    "name": "CreateDBShardGroup",
+    "description": "Grants permission to create a new Aurora Limitless Database DB shard group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "shardgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:PubliclyAccessible",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbsnapshot": {
+    "name": "CreateDBSnapshot",
+    "description": "Grants permission to create a DBSnapshot",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:BackupTarget",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createdbsubnetgroup": {
+    "name": "CreateDBSubnetGroup",
+    "description": "Grants permission to create a new DB subnet group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createeventsubscription": {
+    "name": "CreateEventSubscription",
+    "description": "Grants permission to create an RDS event notification subscription",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "es",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createglobalcluster": {
+    "name": "CreateGlobalCluster",
+    "description": "Grants permission to create an Aurora global database or DocumentDB global database spread across multiple regions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createintegration": {
+    "name": "CreateIntegration",
+    "description": "Grants permission to create an Aurora zero-ETL integration with Redshift",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createoptiongroup": {
+    "name": "CreateOptionGroup",
+    "description": "Grants permission to create a new option group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createtenantdatabase": {
+    "name": "CreateTenantDatabase",
+    "description": "Grants permission to create a new tenant database",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tenant-database",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:ManageMasterUserPassword",
+      "rds:TenantDatabaseName",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deletebluegreendeployment": {
+    "name": "DeleteBlueGreenDeployment",
+    "description": "Grants permission to delete blue green deployments",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "deployment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deletecustomdbengineversion": {
+    "name": "DeleteCustomDBEngineVersion",
+    "description": "Grants permission to delete an existing custom engine version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cev",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbcluster": {
+    "name": "DeleteDBCluster",
+    "description": "Grants permission to delete a previously provisioned DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbclusterautomatedbackup": {
+    "name": "DeleteDBClusterAutomatedBackup",
+    "description": "Grants permission to delete cluster automated backups based on the source cluster's DbClusterResourceId value or the restorable cluster's resource ID",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-auto-backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbclusterendpoint": {
+    "name": "DeleteDBClusterEndpoint",
+    "description": "Grants permission to delete a custom endpoint and removes it from an Amazon Aurora DB cluster or Amazon DocumentDB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbclusterparametergroup": {
+    "name": "DeleteDBClusterParameterGroup",
+    "description": "Grants permission to delete a specified DB cluster parameter group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbclustersnapshot": {
+    "name": "DeleteDBClusterSnapshot",
+    "description": "Grants permission to delete a DB cluster snapshot",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbinstance": {
+    "name": "DeleteDBInstance",
+    "description": "Grants permission to delete a previously provisioned DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbinstanceautomatedbackup": {
+    "name": "DeleteDBInstanceAutomatedBackup",
+    "description": "Grants permission to delete automated backups based on the source instance's DbiResourceId value or the restorable instance's resource ID",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbparametergroup": {
+    "name": "DeleteDBParameterGroup",
+    "description": "Grants permission to delete a specified DBParameterGroup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbproxy": {
+    "name": "DeleteDBProxy",
+    "description": "Grants permission to delete a database proxy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbproxyendpoint": {
+    "name": "DeleteDBProxyEndpoint",
+    "description": "Grants permission to delete a database proxy endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "proxy-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbsecuritygroup": {
+    "name": "DeleteDBSecurityGroup",
+    "description": "Grants permission to delete a DB security group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "secgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbshardgroup": {
+    "name": "DeleteDBShardGroup",
+    "description": "Grants permission to delete an Aurora Limitless Database DB shard group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "shardgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbsnapshot": {
+    "name": "DeleteDBSnapshot",
+    "description": "Grants permission to delete a DBSnapshot",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbsubnetgroup": {
+    "name": "DeleteDBSubnetGroup",
+    "description": "Grants permission to delete a DB subnet group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteeventsubscription": {
+    "name": "DeleteEventSubscription",
+    "description": "Grants permission to delete an RDS event notification subscription",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "es",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteglobalcluster": {
+    "name": "DeleteGlobalCluster",
+    "description": "Grants permission to delete a global database cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteintegration": {
+    "name": "DeleteIntegration",
+    "description": "Grants permission to delete an Aurora zero-ETL integration with Redshift",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteoptiongroup": {
+    "name": "DeleteOptionGroup",
+    "description": "Grants permission to delete an existing option group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetenantdatabase": {
+    "name": "DeleteTenantDatabase",
+    "description": "Grants permission to delete a tenant database",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tenant-database",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deregisterdbproxytargets": {
+    "name": "DeregisterDBProxyTargets",
+    "description": "Grants permission to remove targets from a database proxy target group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "target-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeaccountattributes": {
+    "name": "DescribeAccountAttributes",
+    "description": "Grants permission to list all of the attributes for a customer account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describebluegreendeployments": {
+    "name": "DescribeBlueGreenDeployments",
+    "description": "Grants permission to describe blue green deployments",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "deployment",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describecertificates": {
+    "name": "DescribeCertificates",
+    "description": "Grants permission to list the set of CA certificates provided by Amazon RDS for this AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbclusterautomatedbackups": {
+    "name": "DescribeDBClusterAutomatedBackups",
+    "description": "Grants permission to return a list of cluster automated backups for both current and deleted clusters",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbclusterbacktracks": {
+    "name": "DescribeDBClusterBacktracks",
+    "description": "Grants permission to return information about backtracks for a DB cluster",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbclusterendpoints": {
+    "name": "DescribeDBClusterEndpoints",
+    "description": "Grants permission to return information about endpoints for an Amazon Aurora DB cluster",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbclusterparametergroups": {
+    "name": "DescribeDBClusterParameterGroups",
+    "description": "Grants permission to return a list of DBClusterParameterGroup descriptions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster-pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbclusterparameters": {
+    "name": "DescribeDBClusterParameters",
+    "description": "Grants permission to return the detailed parameter list for a particular DB cluster parameter group",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbclustersnapshotattributes": {
+    "name": "DescribeDBClusterSnapshotAttributes",
+    "description": "Grants permission to return a list of DB cluster snapshot attribute names and values for a manual DB cluster snapshot",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster-snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbclustersnapshots": {
+    "name": "DescribeDBClusterSnapshots",
+    "description": "Grants permission to return information about DB cluster snapshots",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbclusters": {
+    "name": "DescribeDBClusters",
+    "description": "Grants permission to return information about provisioned Aurora DB clusters or DocumentDB clusters",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbengineversions": {
+    "name": "DescribeDBEngineVersions",
+    "description": "Grants permission to return a list of the available DB engines",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbinstanceautomatedbackups": {
+    "name": "DescribeDBInstanceAutomatedBackups",
+    "description": "Grants permission to return a list of automated backups for both current and deleted instances",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbinstances": {
+    "name": "DescribeDBInstances",
+    "description": "Grants permission to return information about provisioned RDS instances",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedblogfiles": {
+    "name": "DescribeDBLogFiles",
+    "description": "Grants permission to return a list of DB log files for the DB instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbmajorengineversions": {
+    "name": "DescribeDBMajorEngineVersions",
+    "description": "Grants permission to return information specific for each DB major engine versions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbparametergroups": {
+    "name": "DescribeDBParameterGroups",
+    "description": "Grants permission to return a list of DBParameterGroup descriptions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbparameters": {
+    "name": "DescribeDBParameters",
+    "description": "Grants permission to return the detailed parameter list for a particular DB parameter group",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbproxies": {
+    "name": "DescribeDBProxies",
+    "description": "Grants permission to view proxies",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "proxy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbproxyendpoints": {
+    "name": "DescribeDBProxyEndpoints",
+    "description": "Grants permission to view proxy endpoints",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "proxy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "proxy-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbproxytargetgroups": {
+    "name": "DescribeDBProxyTargetGroups",
+    "description": "Grants permission to view database proxy target group details",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbproxytargets": {
+    "name": "DescribeDBProxyTargets",
+    "description": "Grants permission to view database proxy target details",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "target-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbrecommendations": {
+    "name": "DescribeDBRecommendations",
+    "description": "Grants permission to list recommendation details",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbsecuritygroups": {
+    "name": "DescribeDBSecurityGroups",
+    "description": "Grants permission to return a list of DBSecurityGroup descriptions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "secgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbshardgroups": {
+    "name": "DescribeDBShardGroups",
+    "description": "Grants permission to return information about all Aurora Limitless Database DB shard groups for this account. You can filter by shard group(s)",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbsnapshotattributes": {
+    "name": "DescribeDBSnapshotAttributes",
+    "description": "Grants permission to return a list of DB snapshot attribute names and values for a manual DB snapshot",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbsnapshottenantdatabases": {
+    "name": "DescribeDBSnapshotTenantDatabases",
+    "description": "Grants permission to return information about tenant databases in DB snapshots. You can filter by Region or snapshot",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot-tenant-database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbsnapshots": {
+    "name": "DescribeDBSnapshots",
+    "description": "Grants permission to return information about DB snapshots",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedbsubnetgroups": {
+    "name": "DescribeDBSubnetGroups",
+    "description": "Grants permission to return a list of DBSubnetGroup descriptions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "subgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeenginedefaultclusterparameters": {
+    "name": "DescribeEngineDefaultClusterParameters",
+    "description": "Grants permission to return the default engine and system parameter information for the cluster database engine",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeenginedefaultparameters": {
+    "name": "DescribeEngineDefaultParameters",
+    "description": "Grants permission to return the default engine and system parameter information for the specified database engine",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeeventcategories": {
+    "name": "DescribeEventCategories",
+    "description": "Grants permission to display a list of categories for all event source types, or, if specified, for a specified source type",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeeventsubscriptions": {
+    "name": "DescribeEventSubscriptions",
+    "description": "Grants permission to list all the subscription descriptions for a customer account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "es",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeevents": {
+    "name": "DescribeEvents",
+    "description": "Grants permission to return events related to DB instances, DB security groups, DB snapshots, and DB parameter groups for the past 14 days",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeexporttasks": {
+    "name": "DescribeExportTasks",
+    "description": "Grants permission to return information about the export tasks",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeglobalclusters": {
+    "name": "DescribeGlobalClusters",
+    "description": "Grants permission to return information about Aurora global database clusters or DocumentDB global database clusters",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeintegrations": {
+    "name": "DescribeIntegrations",
+    "description": "Grants permission to describe an Aurora zero-ETL integration with Redshift",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describeoptiongroupoptions": {
+    "name": "DescribeOptionGroupOptions",
+    "description": "Grants permission to describe all available options",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeoptiongroups": {
+    "name": "DescribeOptionGroups",
+    "description": "Grants permission to describe the available option groups",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "og",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeorderabledbinstanceoptions": {
+    "name": "DescribeOrderableDBInstanceOptions",
+    "description": "Grants permission to return a list of orderable DB instance options for the specified engine",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describependingmaintenanceactions": {
+    "name": "DescribePendingMaintenanceActions",
+    "description": "Grants permission to return a list of resources (for example, DB instances) that have at least one pending maintenance action",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describereserveddbinstances": {
+    "name": "DescribeReservedDBInstances",
+    "description": "Grants permission to return information about reserved DB instances for this account, or about a specified reserved DB instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "ri",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describereserveddbinstancesofferings": {
+    "name": "DescribeReservedDBInstancesOfferings",
+    "description": "Grants permission to list available reserved DB instance offerings",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describesourceregions": {
+    "name": "DescribeSourceRegions",
+    "description": "Grants permission to return a list of the source AWS Regions where the current AWS Region can create a Read Replica or copy a DB snapshot from",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describetenantdatabases": {
+    "name": "DescribeTenantDatabases",
+    "description": "Grants permission to return information about provisioned tenant databases. You can filter by Region or snapshot",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tenant-database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describevaliddbinstancemodifications": {
+    "name": "DescribeValidDBInstanceModifications",
+    "description": "Grants permission to list available modifications you can make to your DB instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disablehttpendpoint": {
+    "name": "DisableHttpEndpoint",
+    "description": "Grants permission to disable http endpoint for a DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "downloadcompletedblogfile": {
+    "name": "DownloadCompleteDBLogFile",
+    "description": "Grants permission to download specified log file",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "downloaddblogfileportion": {
+    "name": "DownloadDBLogFilePortion",
+    "description": "Grants permission to download all or a portion of the specified log file, up to 1 MB in size",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "enablehttpendpoint": {
+    "name": "EnableHttpEndpoint",
+    "description": "Grants permission to enable http endpoint for a DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "failoverdbcluster": {
+    "name": "FailoverDBCluster",
+    "description": "Grants permission to force a failover for a DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "failoverglobalcluster": {
+    "name": "FailoverGlobalCluster",
+    "description": "Grants permission to failover a global cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list all tags on an Amazon RDS resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cev",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "es",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "proxy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "proxy-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ri",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "secgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot-tenant-database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "target-group",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tenant-database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyactivitystream": {
+    "name": "ModifyActivityStream",
+    "description": "Grants permission to modify a database activity stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifycertificates": {
+    "name": "ModifyCertificates",
+    "description": "Grants permission to modify the system-default Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate for Amazon RDS for new DB instances",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifycurrentdbclustercapacity": {
+    "name": "ModifyCurrentDBClusterCapacity",
+    "description": "Grants permission to modify current cluster capacity for an Amazon Aurora Serverless DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifycustomdbengineversion": {
+    "name": "ModifyCustomDBEngineVersion",
+    "description": "Grants permission to modify an existing custom engine version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cev",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbcluster": {
+    "name": "ModifyDBCluster",
+    "description": "Grants permission to modify a setting for an Amazon Aurora DB cluster or Amazon DocumentDB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "rds:DatabaseClass",
+      "rds:ManageMasterUserPassword",
+      "rds:Piops",
+      "rds:StorageSize"
+    ],
+    "dependentActions": []
+  },
+  "modifydbclusterendpoint": {
+    "name": "ModifyDBClusterEndpoint",
+    "description": "Grants permission to modify the properties of an endpoint in an Amazon Aurora DB cluster or Amazon DocumentDB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbclusterparametergroup": {
+    "name": "ModifyDBClusterParameterGroup",
+    "description": "Grants permission to modify the parameters of a DB cluster parameter group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbclustersnapshotattribute": {
+    "name": "ModifyDBClusterSnapshotAttribute",
+    "description": "Grants permission to add an attribute and values to, or removes an attribute and values from, a manual DB cluster snapshot",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbinstance": {
+    "name": "ModifyDBInstance",
+    "description": "Grants permission to modify settings for a DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "secgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "rds:ManageMasterUserPassword"
+    ],
+    "dependentActions": []
+  },
+  "modifydbparametergroup": {
+    "name": "ModifyDBParameterGroup",
+    "description": "Grants permission to modify the parameters of a DB parameter group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbproxy": {
+    "name": "ModifyDBProxy",
+    "description": "Grants permission to modify database proxy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "proxy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbproxyendpoint": {
+    "name": "ModifyDBProxyEndpoint",
+    "description": "Grants permission to modify database proxy endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "proxy-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbproxytargetgroup": {
+    "name": "ModifyDBProxyTargetGroup",
+    "description": "Grants permission to modify target group for a database proxy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "target-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbrecommendation": {
+    "name": "ModifyDBRecommendation",
+    "description": "Grants permission to modify recommendation",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbshardgroup": {
+    "name": "ModifyDBShardGroup",
+    "description": "Grants permission to modify properties of an Aurora Limitless Database DB shard group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "shardgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbsnapshot": {
+    "name": "ModifyDBSnapshot",
+    "description": "Grants permission to update a manual DB snapshot, which can be encrypted or not encrypted, with a new engine version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "og",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbsnapshotattribute": {
+    "name": "ModifyDBSnapshotAttribute",
+    "description": "Grants permission to add an attribute and values to, or removes an attribute and values from, a manual DB snapshot",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "snapshot",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifydbsubnetgroup": {
+    "name": "ModifyDBSubnetGroup",
+    "description": "Grants permission to modify an existing DB subnet group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyeventsubscription": {
+    "name": "ModifyEventSubscription",
+    "description": "Grants permission to modify an existing RDS event notification subscription",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "es",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyglobalcluster": {
+    "name": "ModifyGlobalCluster",
+    "description": "Grants permission to modify a setting for an Amazon Aurora global cluster or Amazon DocumentDB global cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyintegration": {
+    "name": "ModifyIntegration",
+    "description": "Grants permission to modify an Aurora zero-ETL integration with Redshift",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyoptiongroup": {
+    "name": "ModifyOptionGroup",
+    "description": "Grants permission to modify an existing option group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifytenantdatabase": {
+    "name": "ModifyTenantDatabase",
+    "description": "Grants permission to modify a tenant database",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tenant-database",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "rds:ManageMasterUserPassword",
+      "rds:TenantDatabaseName"
+    ],
+    "dependentActions": []
+  },
+  "promotereadreplica": {
+    "name": "PromoteReadReplica",
+    "description": "Grants permission to promote a Read Replica DB instance to a standalone DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "promotereadreplicadbcluster": {
+    "name": "PromoteReadReplicaDBCluster",
+    "description": "Grants permission to promote a Read Replica DB cluster to a standalone DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "purchasereserveddbinstancesoffering": {
+    "name": "PurchaseReservedDBInstancesOffering",
+    "description": "Grants permission to purchase a reserved DB instance offering",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ri",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "rebootdbcluster": {
+    "name": "RebootDBCluster",
+    "description": "Grants permission to reboot a previously provisioned DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rebootdbinstance": {
+    "name": "RebootDBInstance",
+    "description": "Grants permission to restart the database engine service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rebootdbshardgroup": {
+    "name": "RebootDBShardGroup",
+    "description": "Grants permission to reboot an Aurora Limitless Database DB shard group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "shardgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "registerdbproxytargets": {
+    "name": "RegisterDBProxyTargets",
+    "description": "Grants permission to add targets to a database proxy target group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "target-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "removefromglobalcluster": {
+    "name": "RemoveFromGlobalCluster",
+    "description": "Grants permission to detach an Aurora secondary cluster from an Aurora global database cluster or DocumentDB global cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "removerolefromdbcluster": {
+    "name": "RemoveRoleFromDBCluster",
+    "description": "Grants permission to disassociate an AWS Identity and Access Management (IAM) role from an Amazon Aurora DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "removerolefromdbinstance": {
+    "name": "RemoveRoleFromDBInstance",
+    "description": "Grants permission to disassociate an AWS Identity and Access Management (IAM) role from a DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "removesourceidentifierfromsubscription": {
+    "name": "RemoveSourceIdentifierFromSubscription",
+    "description": "Grants permission to remove a source identifier from an existing RDS event notification subscription",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "es",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "removetagsfromresource": {
+    "name": "RemoveTagsFromResource",
+    "description": "Grants permission to remove metadata tags from an Amazon RDS resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cev",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "deployment",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "es",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "proxy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "proxy-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ri",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "secgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot-tenant-database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "target-group",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tenant-database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "resetdbclusterparametergroup": {
+    "name": "ResetDBClusterParameterGroup",
+    "description": "Grants permission to modify the parameters of a DB cluster parameter group to the default value",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "resetdbparametergroup": {
+    "name": "ResetDBParameterGroup",
+    "description": "Grants permission to modify the parameters of a DB parameter group to the engine/system default value",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "restoredbclusterfroms3": {
+    "name": "RestoreDBClusterFromS3",
+    "description": "Grants permission to create an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:DatabaseEngine",
+      "rds:DatabaseName",
+      "rds:ManageMasterUserPassword",
+      "rds:StorageEncrypted",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "restoredbclusterfromsnapshot": {
+    "name": "RestoreDBClusterFromSnapshot",
+    "description": "Grants permission to create a new DB cluster from a DB cluster snapshot",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:DatabaseClass",
+      "rds:Piops",
+      "rds:StorageSize",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "restoredbclustertopointintime": {
+    "name": "RestoreDBClusterToPointInTime",
+    "description": "Grants permission to restore a DB cluster to an arbitrary point in time",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:DatabaseClass",
+      "rds:Piops",
+      "rds:StorageSize",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "restoredbinstancefromdbsnapshot": {
+    "name": "RestoreDBInstanceFromDBSnapshot",
+    "description": "Grants permission to create a new DB instance from a DB snapshot",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:BackupTarget",
+      "rds:ManageMasterUserPassword",
+      "rds:PubliclyAccessible",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "restoredbinstancefroms3": {
+    "name": "RestoreDBInstanceFromS3",
+    "description": "Grants permission to create a new DB instance from an Amazon S3 bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "secgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:ManageMasterUserPassword",
+      "rds:PubliclyAccessible",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "restoredbinstancetopointintime": {
+    "name": "RestoreDBInstanceToPointInTime",
+    "description": "Grants permission to restore a DB instance to an arbitrary point in time",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "og",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "pg",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "subgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:BackupTarget",
+      "rds:ManageMasterUserPassword",
+      "rds:PubliclyAccessible",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "revokedbsecuritygroupingress": {
+    "name": "RevokeDBSecurityGroupIngress",
+    "description": "Grants permission to revoke ingress from a DBSecurityGroup for previously authorized IP ranges or EC2 or VPC Security Groups",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "secgrp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startactivitystream": {
+    "name": "StartActivityStream",
+    "description": "Grants permission to start Activity Stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startdbcluster": {
+    "name": "StartDBCluster",
+    "description": "Grants permission to start the DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startdbinstance": {
+    "name": "StartDBInstance",
+    "description": "Grants permission to start the DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startdbinstanceautomatedbackupsreplication": {
+    "name": "StartDBInstanceAutomatedBackupsReplication",
+    "description": "Grants permission to start replication of automated backups to a different AWS Region",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "startexporttask": {
+    "name": "StartExportTask",
+    "description": "Grants permission to start a new Export task for a DB snapshot",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster-snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopactivitystream": {
+    "name": "StopActivityStream",
+    "description": "Grants permission to stop Activity Stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopdbcluster": {
+    "name": "StopDBCluster",
+    "description": "Grants permission to stop the DB cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopdbinstance": {
+    "name": "StopDBInstance",
+    "description": "Grants permission to stop the DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "snapshot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopdbinstanceautomatedbackupsreplication": {
+    "name": "StopDBInstanceAutomatedBackupsReplication",
+    "description": "Grants permission to stop automated backup replication for a DB instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "switchoverbluegreendeployment": {
+    "name": "SwitchoverBlueGreenDeployment",
+    "description": "Grants permission to switch a blue-green deployment from source instance or cluster to target",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "deployment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "switchoverglobalcluster": {
+    "name": "SwitchoverGlobalCluster",
+    "description": "Grants permission to switchover a global cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "global-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "switchoverreadreplica": {
+    "name": "SwitchoverReadReplica",
+    "description": "Grants permission to switch over a read replica, making it the new primary database",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}