@actsecurity/iam-data 0.21.202608301

package/data/actions/storagegateway.json

@@ -0,0 +1,1573 @@
+{
+  "activategateway": {
+    "name": "ActivateGateway",
+    "description": "Grants permission to activate the gateway you previously deployed on your host",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "addcache": {
+    "name": "AddCache",
+    "description": "Grants permission to configure one or more gateway local disks as cache for a cached-volume gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "addtagstoresource": {
+    "name": "AddTagsToResource",
+    "description": "Grants permission to add one or more tags to the specified resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "cache-report",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "fs-association",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "share",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tape",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tapepool",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "volume",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "adduploadbuffer": {
+    "name": "AddUploadBuffer",
+    "description": "Grants permission to configure one or more gateway local disks as upload buffer for a specified gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "addworkingstorage": {
+    "name": "AddWorkingStorage",
+    "description": "Grants permission to configure one or more gateway local disks as working storage for a gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "assigntapepool": {
+    "name": "AssignTapePool",
+    "description": "Grants permission to move a tape to the target pool specified",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "tape",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tapepool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associatefilesystem": {
+    "name": "AssociateFileSystem",
+    "description": "Grants permission to associate an Amazon FSx file system with the Amazon FSx file gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "attachvolume": {
+    "name": "AttachVolume",
+    "description": "Grants permission to connect a volume to an iSCSI connection and then attaches the volume to the specified gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "bypassgovernanceretention": {
+    "name": "BypassGovernanceRetention",
+    "description": "Grants permission to allow the governance retention lock on a pool to be bypassed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "tapepool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelarchival": {
+    "name": "CancelArchival",
+    "description": "Grants permission to cancel archiving of a virtual tape to the virtual tape shelf (VTS) after the archiving process is initiated",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tape",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelcachereport": {
+    "name": "CancelCacheReport",
+    "description": "Grants permission to cancel a cache report",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cache-report",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelretrieval": {
+    "name": "CancelRetrieval",
+    "description": "Grants permission to cancel retrieval of a virtual tape from the virtual tape shelf (VTS) to a gateway after the retrieval process is initiated",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tape",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createcachediscsivolume": {
+    "name": "CreateCachediSCSIVolume",
+    "description": "Grants permission to create a cached volume on a specified cached gateway. This operation is supported only for the gateway-cached volume architecture",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createnfsfileshare": {
+    "name": "CreateNFSFileShare",
+    "description": "Grants permission to create a NFS file share on an existing file gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createsmbfileshare": {
+    "name": "CreateSMBFileShare",
+    "description": "Grants permission to create a SMB file share on an existing file gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createsnapshot": {
+    "name": "CreateSnapshot",
+    "description": "Grants permission to initiate a snapshot of a volume",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createsnapshotfromvolumerecoverypoint": {
+    "name": "CreateSnapshotFromVolumeRecoveryPoint",
+    "description": "Grants permission to initiate a snapshot of a gateway from a volume recovery point",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createstorediscsivolume": {
+    "name": "CreateStorediSCSIVolume",
+    "description": "Grants permission to create a volume on a specified gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createtapepool": {
+    "name": "CreateTapePool",
+    "description": "Grants permission to create a tape pool",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createtapewithbarcode": {
+    "name": "CreateTapeWithBarcode",
+    "description": "Grants permission to create a virtual tape by using your own barcode",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tapepool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createtapes": {
+    "name": "CreateTapes",
+    "description": "Grants permission to create one or more virtual tapes. You write data to the virtual tapes and then archive the tapes",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tapepool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteautomatictapecreationpolicy": {
+    "name": "DeleteAutomaticTapeCreationPolicy",
+    "description": "Grants permission to delete the automatic tape creation policy configured on a gateway-VTL",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletebandwidthratelimit": {
+    "name": "DeleteBandwidthRateLimit",
+    "description": "Grants permission to delete the bandwidth rate limits of a gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecachereport": {
+    "name": "DeleteCacheReport",
+    "description": "Grants permission to delete the metadata associated with a cache report",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cache-report",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletechapcredentials": {
+    "name": "DeleteChapCredentials",
+    "description": "Grants permission to delete Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target and initiator pair",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "target",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletefileshare": {
+    "name": "DeleteFileShare",
+    "description": "Grants permission to delete a file share from a file gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletegateway": {
+    "name": "DeleteGateway",
+    "description": "Grants permission to delete a gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletesnapshotschedule": {
+    "name": "DeleteSnapshotSchedule",
+    "description": "Grants permission to delete a snapshot of a volume",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetape": {
+    "name": "DeleteTape",
+    "description": "Grants permission to delete the specified virtual tape",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tape",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetapearchive": {
+    "name": "DeleteTapeArchive",
+    "description": "Grants permission to delete the specified virtual tape from the virtual tape shelf (VTS)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetapepool": {
+    "name": "DeleteTapePool",
+    "description": "Grants permission to delete the specified tape pool",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "tapepool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevolume": {
+    "name": "DeleteVolume",
+    "description": "Grants permission to delete the specified gateway volume that you previously created using the CreateCachediSCSIVolume or CreateStorediSCSIVolume API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeavailabilitymonitortest": {
+    "name": "DescribeAvailabilityMonitorTest",
+    "description": "Grants permission to get the information about the most recent high availability monitoring test that was performed on the gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describebandwidthratelimit": {
+    "name": "DescribeBandwidthRateLimit",
+    "description": "Grants permission to get the bandwidth rate limits of a gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describebandwidthratelimitschedule": {
+    "name": "DescribeBandwidthRateLimitSchedule",
+    "description": "Grants permission to get the bandwidth rate limit schedule of a gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describecache": {
+    "name": "DescribeCache",
+    "description": "Grants permission to get information about the cache of a gateway. This operation is supported only for the gateway-cached volume architecture",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describecachereport": {
+    "name": "DescribeCacheReport",
+    "description": "Grants permission to get a description of a cache report",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cache-report",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describecachediscsivolumes": {
+    "name": "DescribeCachediSCSIVolumes",
+    "description": "Grants permission to get a description of the gateway volumes specified in the request. This operation is supported only for the gateway-cached volume architecture",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describechapcredentials": {
+    "name": "DescribeChapCredentials",
+    "description": "Grants permission to get an array of Challenge-Handshake Authentication Protocol (CHAP) credentials information for a specified iSCSI target, one for each target-initiator pair",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "target",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describefilesystemassociations": {
+    "name": "DescribeFileSystemAssociations",
+    "description": "Grants permission to get a description for one or more file system associations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "fs-association",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describegatewayinformation": {
+    "name": "DescribeGatewayInformation",
+    "description": "Grants permission to get metadata about a gateway such as its name, network interfaces, configured time zone, and the state (whether the gateway is running or not)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describemaintenancestarttime": {
+    "name": "DescribeMaintenanceStartTime",
+    "description": "Grants permission to get your gateway's weekly maintenance start time including the day and time of the week",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describenfsfileshares": {
+    "name": "DescribeNFSFileShares",
+    "description": "Grants permission to get a description for one or more file shares from a file gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describesmbfileshares": {
+    "name": "DescribeSMBFileShares",
+    "description": "Grants permission to get a description for one or more file shares from a file gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describesmbsettings": {
+    "name": "DescribeSMBSettings",
+    "description": "Grants permission to get a description of a Server Message Block (SMB) file share settings from a file gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describesnapshotschedule": {
+    "name": "DescribeSnapshotSchedule",
+    "description": "Grants permission to describe the snapshot schedule for the specified gateway volume",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describestorediscsivolumes": {
+    "name": "DescribeStorediSCSIVolumes",
+    "description": "Grants permission to get the description of the gateway volumes specified in the request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describetapearchives": {
+    "name": "DescribeTapeArchives",
+    "description": "Grants permission to get a description of specified virtual tapes in the virtual tape shelf (VTS)",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describetaperecoverypoints": {
+    "name": "DescribeTapeRecoveryPoints",
+    "description": "Grants permission to get a list of virtual tape recovery points that are available for the specified gateway-VTL",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describetapes": {
+    "name": "DescribeTapes",
+    "description": "Grants permission to get a description of the specified Amazon Resource Name (ARN) of virtual tapes",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeuploadbuffer": {
+    "name": "DescribeUploadBuffer",
+    "description": "Grants permission to get information about the upload buffer of a gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describevtldevices": {
+    "name": "DescribeVTLDevices",
+    "description": "Grants permission to get a description of virtual tape library (VTL) devices for the specified gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkingstorage": {
+    "name": "DescribeWorkingStorage",
+    "description": "Grants permission to get information about the working storage of a gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "detachvolume": {
+    "name": "DetachVolume",
+    "description": "Grants permission to disconnect a volume from an iSCSI connection and then detaches the volume from the specified gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disablegateway": {
+    "name": "DisableGateway",
+    "description": "Grants permission to disable a gateway when the gateway is no longer functioning",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociatefilesystem": {
+    "name": "DisassociateFileSystem",
+    "description": "Grants permission to disassociate an Amazon FSx file system from an Amazon FSx file gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "fs-association",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "evictfilesfailingupload": {
+    "name": "EvictFilesFailingUpload",
+    "description": "Grants permission to clean a share's cache of file entries that are failing upload to Amazon S3",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "joindomain": {
+    "name": "JoinDomain",
+    "description": "Grants permission to enable you to join an Active Directory Domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomatictapecreationpolicies": {
+    "name": "ListAutomaticTapeCreationPolicies",
+    "description": "Grants permission to list the automatic tape creation policies configured on the specified gateway-VTL or all gateway-VTLs owned by your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcachereports": {
+    "name": "ListCacheReports",
+    "description": "Grants permission to get a list of the cache reports owned by your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfileshares": {
+    "name": "ListFileShares",
+    "description": "Grants permission to get a list of the file shares for a specific file gateway, or the list of file shares owned by your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfilesystemassociations": {
+    "name": "ListFileSystemAssociations",
+    "description": "Grants permission to get a list of the file system associations for the specified gateway",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listgateways": {
+    "name": "ListGateways",
+    "description": "Grants permission to list gateways owned by an AWS account in a region specified in the request. The returned list is ordered by gateway Amazon Resource Name (ARN)",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listlocaldisks": {
+    "name": "ListLocalDisks",
+    "description": "Grants permission to get a list of the gateway's local disks",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to get the tags that have been added to the specified resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "share",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tape",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "volume",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtapepools": {
+    "name": "ListTapePools",
+    "description": "Grants permission to list tape pools owned by your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtapes": {
+    "name": "ListTapes",
+    "description": "Grants permission to list virtual tapes in your virtual tape library (VTL) and your virtual tape shelf (VTS)",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvolumeinitiators": {
+    "name": "ListVolumeInitiators",
+    "description": "Grants permission to list iSCSI initiators that are connected to a volume",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvolumerecoverypoints": {
+    "name": "ListVolumeRecoveryPoints",
+    "description": "Grants permission to list the recovery points for a specified gateway",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvolumes": {
+    "name": "ListVolumes",
+    "description": "Grants permission to list the iSCSI stored volumes of a gateway",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "notifywhenuploaded": {
+    "name": "NotifyWhenUploaded",
+    "description": "Grants permission to send you a notification through CloudWatch Events when all files written to your NFS file share have been uploaded to Amazon S3",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "refreshcache": {
+    "name": "RefreshCache",
+    "description": "Grants permission to refresh the cache for the specified file share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "removetagsfromresource": {
+    "name": "RemoveTagsFromResource",
+    "description": "Grants permission to remove one or more tags from the specified resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "cache-report",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "fs-association",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "share",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tape",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tapepool",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "volume",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "resetcache": {
+    "name": "ResetCache",
+    "description": "Grants permission to reset all cache disks that have encountered a error and makes the disks available for reconfiguration as cache storage",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "retrievetapearchive": {
+    "name": "RetrieveTapeArchive",
+    "description": "Grants permission to retrieve an archived virtual tape from the virtual tape shelf (VTS) to a gateway-VTL",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tape",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "retrievetaperecoverypoint": {
+    "name": "RetrieveTapeRecoveryPoint",
+    "description": "Grants permission to retrieve the recovery point for the specified virtual tape",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tape",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "setlocalconsolepassword": {
+    "name": "SetLocalConsolePassword",
+    "description": "Grants permission to set the password for your VM local console",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "setsmbguestpassword": {
+    "name": "SetSMBGuestPassword",
+    "description": "Grants permission to set the password for SMB Guest user",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "shutdowngateway": {
+    "name": "ShutdownGateway",
+    "description": "Grants permission to shut down a gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startavailabilitymonitortest": {
+    "name": "StartAvailabilityMonitorTest",
+    "description": "Grants permission to start a test that verifies that the specified gateway is configured for High Availability monitoring in your host environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startcachereport": {
+    "name": "StartCacheReport",
+    "description": "Grants permission to start a cache report for an existing file share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "startgateway": {
+    "name": "StartGateway",
+    "description": "Grants permission to start a gateway that you previously shut down",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateautomatictapecreationpolicy": {
+    "name": "UpdateAutomaticTapeCreationPolicy",
+    "description": "Grants permission to update the automatic tape creation policy configured on a gateway-VTL",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "tapepool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatebandwidthratelimit": {
+    "name": "UpdateBandwidthRateLimit",
+    "description": "Grants permission to update the bandwidth rate limits of a gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatebandwidthratelimitschedule": {
+    "name": "UpdateBandwidthRateLimitSchedule",
+    "description": "Grants permission to update the bandwidth rate limit schedule of a gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatechapcredentials": {
+    "name": "UpdateChapCredentials",
+    "description": "Grants permission to update the Challenge-Handshake Authentication Protocol (CHAP) credentials for a specified iSCSI target",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "target",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatefilesystemassociation": {
+    "name": "UpdateFileSystemAssociation",
+    "description": "Grants permission to update a file system association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "fs-association",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updategatewayinformation": {
+    "name": "UpdateGatewayInformation",
+    "description": "Grants permission to update a gateway's metadata, which includes the gateway's name and time zone",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updategatewaysoftwarenow": {
+    "name": "UpdateGatewaySoftwareNow",
+    "description": "Grants permission to update the gateway virtual machine (VM) software",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatemaintenancestarttime": {
+    "name": "UpdateMaintenanceStartTime",
+    "description": "Grants permission to update a gateway's weekly maintenance start time information, including day and time of the week. The maintenance time is the time in your gateway's time zone",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatenfsfileshare": {
+    "name": "UpdateNFSFileShare",
+    "description": "Grants permission to update a NFS file share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatesmbfileshare": {
+    "name": "UpdateSMBFileShare",
+    "description": "Grants permission to update a SMB file share",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "share",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatesmbfilesharevisibility": {
+    "name": "UpdateSMBFileShareVisibility",
+    "description": "Grants permission to update whether the shares on a gateway are visible in a net view or browse list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatesmblocalgroups": {
+    "name": "UpdateSMBLocalGroups",
+    "description": "Grants permission to update the list of Active Directory users and groups that have special permissions for SMB file shares on the gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatesmbsecuritystrategy": {
+    "name": "UpdateSMBSecurityStrategy",
+    "description": "Grants permission to update the SMB security strategy on a file gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatesnapshotschedule": {
+    "name": "UpdateSnapshotSchedule",
+    "description": "Grants permission to update a snapshot schedule configured for a gateway volume",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updatevtldevicetype": {
+    "name": "UpdateVTLDeviceType",
+    "description": "Grants permission to update the type of medium changer in a gateway-VTL",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "device",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}