@actsecurity/iam-data 0.21.202608301

package/data/actions/servicecatalog.json

@@ -0,0 +1,1493 @@
+{
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete a resource-based policy for the specified resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AttributeGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to get a resource-based policy for the specified resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AttributeGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to add a resource-based policy for the specified resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AttributeGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "acceptportfolioshare": {
+    "name": "AcceptPortfolioShare",
+    "description": "Grants permission to accept a portfolio that has been shared with you",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associateattributegroup": {
+    "name": "AssociateAttributeGroup",
+    "description": "Grants permission to associate an attribute group with an application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AttributeGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associatebudgetwithresource": {
+    "name": "AssociateBudgetWithResource",
+    "description": "Grants permission to associate a budget with a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associateprincipalwithportfolio": {
+    "name": "AssociatePrincipalWithPortfolio",
+    "description": "Grants permission to associate an IAM principal with a portfolio, giving the specified principal access to any products associated with the specified portfolio",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associateproductwithportfolio": {
+    "name": "AssociateProductWithPortfolio",
+    "description": "Grants permission to associate a product with a portfolio",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associateresource": {
+    "name": "AssociateResource",
+    "description": "Grants permission to associate a resource with an application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "servicecatalog:Resource",
+      "servicecatalog:ResourceType"
+    ],
+    "dependentActions": []
+  },
+  "associateserviceactionwithprovisioningartifact": {
+    "name": "AssociateServiceActionWithProvisioningArtifact",
+    "description": "Grants permission to associate an action with a provisioning artifact",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associatetagoptionwithresource": {
+    "name": "AssociateTagOptionWithResource",
+    "description": "Grants permission to associate the specified TagOption with the specified portfolio or product",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Product",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchassociateserviceactionwithprovisioningartifact": {
+    "name": "BatchAssociateServiceActionWithProvisioningArtifact",
+    "description": "Grants permission to associate multiple self-service actions with provisioning artifacts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdisassociateserviceactionfromprovisioningartifact": {
+    "name": "BatchDisassociateServiceActionFromProvisioningArtifact",
+    "description": "Grants permission to disassociate a batch of self-service actions from the specified provisioning artifact",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "copyproduct": {
+    "name": "CopyProduct",
+    "description": "Grants permission to copy the specified source product to the specified target product or a new product",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createapplication": {
+    "name": "CreateApplication",
+    "description": "Grants permission to create an application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createattributegroup": {
+    "name": "CreateAttributeGroup",
+    "description": "Grants permission to create an attribute group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AttributeGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createconstraint": {
+    "name": "CreateConstraint",
+    "description": "Grants permission to create a constraint on an associated product and portfolio",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createportfolio": {
+    "name": "CreatePortfolio",
+    "description": "Grants permission to create a portfolio",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createportfolioshare": {
+    "name": "CreatePortfolioShare",
+    "description": "Grants permission to share a portfolio you own with another AWS account",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createproduct": {
+    "name": "CreateProduct",
+    "description": "Grants permission to create a product and that product's first provisioning artifact",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createprovisionedproductplan": {
+    "name": "CreateProvisionedProductPlan",
+    "description": "Grants permission to add a new provisioned product plan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "createprovisioningartifact": {
+    "name": "CreateProvisioningArtifact",
+    "description": "Grants permission to add a new provisioning artifact to an existing product",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createserviceaction": {
+    "name": "CreateServiceAction",
+    "description": "Grants permission to create a self-service action",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createtagoption": {
+    "name": "CreateTagOption",
+    "description": "Grants permission to create a TagOption",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteapplication": {
+    "name": "DeleteApplication",
+    "description": "Grants permission to delete an application if all associations have been removed from the application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteattributegroup": {
+    "name": "DeleteAttributeGroup",
+    "description": "Grants permission to delete an attribute group if all associations have been removed from the attribute group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AttributeGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteconstraint": {
+    "name": "DeleteConstraint",
+    "description": "Grants permission to remove and delete an existing constraint from an associated product and portfolio",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteportfolio": {
+    "name": "DeletePortfolio",
+    "description": "Grants permission to delete a portfolio if all associations and shares have been removed from the portfolio",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteportfolioshare": {
+    "name": "DeletePortfolioShare",
+    "description": "Grants permission to unshare a portfolio you own from an AWS account you previously shared the portfolio with",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteproduct": {
+    "name": "DeleteProduct",
+    "description": "Grants permission to delete a product if all associations have been removed from the product",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteprovisionedproductplan": {
+    "name": "DeleteProvisionedProductPlan",
+    "description": "Grants permission to delete a provisioned product plan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "deleteprovisioningartifact": {
+    "name": "DeleteProvisioningArtifact",
+    "description": "Grants permission to delete a provisioning artifact from a product",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteserviceaction": {
+    "name": "DeleteServiceAction",
+    "description": "Grants permission to delete a self-service action",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetagoption": {
+    "name": "DeleteTagOption",
+    "description": "Grants permission to delete the specified TagOption",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeconstraint": {
+    "name": "DescribeConstraint",
+    "description": "Grants permission to describe a constraint",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describecopyproductstatus": {
+    "name": "DescribeCopyProductStatus",
+    "description": "Grants permission to get the status of the specified copy product operation",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeportfolio": {
+    "name": "DescribePortfolio",
+    "description": "Grants permission to describe a portfolio",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeportfoliosharestatus": {
+    "name": "DescribePortfolioShareStatus",
+    "description": "Grants permission to get the status of the specified portfolio share operation",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeportfolioshares": {
+    "name": "DescribePortfolioShares",
+    "description": "Grants permission to view a summary of each of the portfolio shares that were created for the specified portfolio",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeproduct": {
+    "name": "DescribeProduct",
+    "description": "Grants permission to describe a product as an end-user",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeproductasadmin": {
+    "name": "DescribeProductAsAdmin",
+    "description": "Grants permission to describe a product as an admin",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeproductview": {
+    "name": "DescribeProductView",
+    "description": "Grants permission to describe a product as an end-user",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeprovisionedproduct": {
+    "name": "DescribeProvisionedProduct",
+    "description": "Grants permission to describe a provisioned product",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "describeprovisionedproductplan": {
+    "name": "DescribeProvisionedProductPlan",
+    "description": "Grants permission to describe a provisioned product plan",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "describeprovisioningartifact": {
+    "name": "DescribeProvisioningArtifact",
+    "description": "Grants permission to describe a provisioning artifact",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeprovisioningparameters": {
+    "name": "DescribeProvisioningParameters",
+    "description": "Grants permission to describe the parameters that you need to specify to successfully provision a specified provisioning artifact",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describerecord": {
+    "name": "DescribeRecord",
+    "description": "Grants permission to describe a record and lists any outputs",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "describeserviceaction": {
+    "name": "DescribeServiceAction",
+    "description": "Grants permission to describe a self-service action",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeserviceactionexecutionparameters": {
+    "name": "DescribeServiceActionExecutionParameters",
+    "description": "Grants permission to get the default parameters if you executed the specified Service Action on the specified Provisioned Product",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "describetagoption": {
+    "name": "DescribeTagOption",
+    "description": "Grants permission to get information about the specified TagOption",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disableawsorganizationsaccess": {
+    "name": "DisableAWSOrganizationsAccess",
+    "description": "Grants permission to disable portfolio sharing through AWS Organizations feature",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociateattributegroup": {
+    "name": "DisassociateAttributeGroup",
+    "description": "Grants permission to disassociate an attribute group from an application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AttributeGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociatebudgetfromresource": {
+    "name": "DisassociateBudgetFromResource",
+    "description": "Grants permission to disassociate a budget from a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociateprincipalfromportfolio": {
+    "name": "DisassociatePrincipalFromPortfolio",
+    "description": "Grants permission to disassociate an IAM principal from a portfolio",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociateproductfromportfolio": {
+    "name": "DisassociateProductFromPortfolio",
+    "description": "Grants permission to disassociate a product from a portfolio",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociateresource": {
+    "name": "DisassociateResource",
+    "description": "Grants permission to disassociate a resource from an application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "servicecatalog:Resource",
+      "servicecatalog:ResourceType"
+    ],
+    "dependentActions": []
+  },
+  "disassociateserviceactionfromprovisioningartifact": {
+    "name": "DisassociateServiceActionFromProvisioningArtifact",
+    "description": "Grants permission to disassociate the specified self-service action association from the specified provisioning artifact",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociatetagoptionfromresource": {
+    "name": "DisassociateTagOptionFromResource",
+    "description": "Grants permission to disassociate the specified TagOption from the specified resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Product",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "enableawsorganizationsaccess": {
+    "name": "EnableAWSOrganizationsAccess",
+    "description": "Grants permission to enable portfolio sharing feature through AWS Organizations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "executeprovisionedproductplan": {
+    "name": "ExecuteProvisionedProductPlan",
+    "description": "Grants permission to execute a provisioned product plan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "executeprovisionedproductserviceaction": {
+    "name": "ExecuteProvisionedProductServiceAction",
+    "description": "Grants permission to executes a provisioned product plan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "getawsorganizationsaccessstatus": {
+    "name": "GetAWSOrganizationsAccessStatus",
+    "description": "Grants permission to get the access status of AWS Organization portfolio share feature",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getapplication": {
+    "name": "GetApplication",
+    "description": "Grants permission to get an application",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getassociatedresource": {
+    "name": "GetAssociatedResource",
+    "description": "Grants permission to get information about a resource associated to an application",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "servicecatalog:Resource",
+      "servicecatalog:ResourceType"
+    ],
+    "dependentActions": []
+  },
+  "getattributegroup": {
+    "name": "GetAttributeGroup",
+    "description": "Grants permission to get an attribute group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AttributeGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getconfiguration": {
+    "name": "GetConfiguration",
+    "description": "Grants permission to read AppRegistry configurations",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getprovisionedproductoutputs": {
+    "name": "GetProvisionedProductOutputs",
+    "description": "Grants permission to get the provisioned product output with either provisioned product id or name",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "importasprovisionedproduct": {
+    "name": "ImportAsProvisionedProduct",
+    "description": "Grants permission to import a resource into a provisioned product",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listacceptedportfolioshares": {
+    "name": "ListAcceptedPortfolioShares",
+    "description": "Grants permission to list the portfolios that have been shared with you and you have accepted",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listapplications": {
+    "name": "ListApplications",
+    "description": "Grants permission to list your applications",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listassociatedattributegroups": {
+    "name": "ListAssociatedAttributeGroups",
+    "description": "Grants permission to list the attribute groups associated with an application",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listassociatedresources": {
+    "name": "ListAssociatedResources",
+    "description": "Grants permission to list the resources associated with an application",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listattributegroups": {
+    "name": "ListAttributeGroups",
+    "description": "Grants permission to list your attribute groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listattributegroupsforapplication": {
+    "name": "ListAttributeGroupsForApplication",
+    "description": "Grants permission to list the associated attribute groups for a given application",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listbudgetsforresource": {
+    "name": "ListBudgetsForResource",
+    "description": "Grants permission to list all the budgets associated to a resource",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listconstraintsforportfolio": {
+    "name": "ListConstraintsForPortfolio",
+    "description": "Grants permission to list constraints associated with a given portfolio",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listlaunchpaths": {
+    "name": "ListLaunchPaths",
+    "description": "Grants permission to list the different ways to launch a given product as an end-user",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listorganizationportfolioaccess": {
+    "name": "ListOrganizationPortfolioAccess",
+    "description": "Grants permission to list the organization nodes that have access to the specified portfolio",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listportfolioaccess": {
+    "name": "ListPortfolioAccess",
+    "description": "Grants permission to list the AWS accounts you have shared a given portfolio with",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listportfolios": {
+    "name": "ListPortfolios",
+    "description": "Grants permission to list the portfolios in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listportfoliosforproduct": {
+    "name": "ListPortfoliosForProduct",
+    "description": "Grants permission to list the portfolios associated with a given product",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listprincipalsforportfolio": {
+    "name": "ListPrincipalsForPortfolio",
+    "description": "Grants permission to list the IAM principals associated with a given portfolio",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listprovisionedproductplans": {
+    "name": "ListProvisionedProductPlans",
+    "description": "Grants permission to list the provisioned product plans",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "listprovisioningartifacts": {
+    "name": "ListProvisioningArtifacts",
+    "description": "Grants permission to list the provisioning artifacts associated with a given product",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listprovisioningartifactsforserviceaction": {
+    "name": "ListProvisioningArtifactsForServiceAction",
+    "description": "Grants permission to list all provisioning artifacts for the specified self-service action",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrecordhistory": {
+    "name": "ListRecordHistory",
+    "description": "Grants permission to list all the records in your account or all the records related to a given provisioned product",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "listresourcesfortagoption": {
+    "name": "ListResourcesForTagOption",
+    "description": "Grants permission to list the resources associated with the specified TagOption",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listserviceactions": {
+    "name": "ListServiceActions",
+    "description": "Grants permission to list all self-service actions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listserviceactionsforprovisioningartifact": {
+    "name": "ListServiceActionsForProvisioningArtifact",
+    "description": "Grants permission to list all the service actions associated with the specified provisioning artifact in your account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "liststackinstancesforprovisionedproduct": {
+    "name": "ListStackInstancesForProvisionedProduct",
+    "description": "Grants permission to list account, region and status of each stack instances that are associated with a CFN_STACKSET type provisioned product",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "listtagoptions": {
+    "name": "ListTagOptions",
+    "description": "Grants permission to list the specified TagOptions or all TagOptions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for a service catalog appregistry resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AttributeGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "notifyprovisionproductengineworkflowresult": {
+    "name": "NotifyProvisionProductEngineWorkflowResult",
+    "description": "Grants permission to notify the result of the provisioning engine execution",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "notifyterminateprovisionedproductengineworkflowresult": {
+    "name": "NotifyTerminateProvisionedProductEngineWorkflowResult",
+    "description": "Grants permission to notify the result of the terminate engine execution",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "notifyupdateprovisionedproductengineworkflowresult": {
+    "name": "NotifyUpdateProvisionedProductEngineWorkflowResult",
+    "description": "Grants permission to notify the result of the update engine execution",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "provisionproduct": {
+    "name": "ProvisionProduct",
+    "description": "Grants permission to provision a product with a specified provisioning artifact and launch parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putconfiguration": {
+    "name": "PutConfiguration",
+    "description": "Grants permission to assign AppRegistry configurations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rejectportfolioshare": {
+    "name": "RejectPortfolioShare",
+    "description": "Grants permission to reject a portfolio that has been shared with you that you previously accepted",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "scanprovisionedproducts": {
+    "name": "ScanProvisionedProducts",
+    "description": "Grants permission to list all the provisioned products in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "searchproducts": {
+    "name": "SearchProducts",
+    "description": "Grants permission to list the products available to you as an end-user",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchproductsasadmin": {
+    "name": "SearchProductsAsAdmin",
+    "description": "Grants permission to list all the products in your account or all the products associated with a given portfolio",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchprovisionedproducts": {
+    "name": "SearchProvisionedProducts",
+    "description": "Grants permission to list all the provisioned products in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "syncresource": {
+    "name": "SyncResource",
+    "description": "Grants permission to sync a resource with its current state in AppRegistry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a service catalog appregistry resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AttributeGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "terminateprovisionedproduct": {
+    "name": "TerminateProvisionedProduct",
+    "description": "Grants permission to terminate an existing provisioned product",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove a tag from a service catalog appregistry resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AttributeGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateapplication": {
+    "name": "UpdateApplication",
+    "description": "Grants permission to update the attributes of an existing application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateattributegroup": {
+    "name": "UpdateAttributeGroup",
+    "description": "Grants permission to update the attributes of an existing attribute group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AttributeGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateconstraint": {
+    "name": "UpdateConstraint",
+    "description": "Grants permission to update the metadata fields of an existing constraint",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateportfolio": {
+    "name": "UpdatePortfolio",
+    "description": "Grants permission to update the metadata fields and/or tags of an existing portfolio",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateportfolioshare": {
+    "name": "UpdatePortfolioShare",
+    "description": "Grants permission to enable or disable resource sharing for an existing portfolio share",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "Portfolio",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateproduct": {
+    "name": "UpdateProduct",
+    "description": "Grants permission to update the metadata fields and/or tags of an existing product",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateprovisionedproduct": {
+    "name": "UpdateProvisionedProduct",
+    "description": "Grants permission to update an existing provisioned product",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "servicecatalog:accountLevel",
+      "servicecatalog:roleLevel",
+      "servicecatalog:userLevel"
+    ],
+    "dependentActions": []
+  },
+  "updateprovisionedproductproperties": {
+    "name": "UpdateProvisionedProductProperties",
+    "description": "Grants permission to update the properties of an existing provisioned product",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateprovisioningartifact": {
+    "name": "UpdateProvisioningArtifact",
+    "description": "Grants permission to update the metadata fields of an existing provisioning artifact",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateserviceaction": {
+    "name": "UpdateServiceAction",
+    "description": "Grants permission to update a self-service action",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatetagoption": {
+    "name": "UpdateTagOption",
+    "description": "Grants permission to update the specified TagOption",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}