@actsecurity/iam-data 0.21.202608301

package/data/actions/workspaces.json

@@ -0,0 +1,1488 @@
+{
+  "createrootclientcertificate": {
+    "name": "CreateRootClientCertificate",
+    "description": "Grants permission to create a root client certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleterootclientcertificate": {
+    "name": "DeleteRootClientCertificate",
+    "description": "Grants permission to delete root client certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeconsent": {
+    "name": "DescribeConsent",
+    "description": "Grants permission to retrieve information about consent agreement to BYOL minimum requirements",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "directoryaccessmanagement": {
+    "name": "DirectoryAccessManagement",
+    "description": "Grants permission to directory management actions while managing and provisioning workspaces",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettroubleshootingrecommendation": {
+    "name": "GetTroubleshootingRecommendation",
+    "description": "Grants permission to get troubleshooting recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokeonboardingagent": {
+    "name": "InvokeOnboardingAgent",
+    "description": "Grants permission to use WorkSpaces Advisor for WorkSpace onboarding",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invoketroubleshootinginvestigation": {
+    "name": "InvokeTroubleshootingInvestigation",
+    "description": "Grants permission to invoke troubleshooting investigation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtroubleshootingrecommendations": {
+    "name": "ListTroubleshootingRecommendations",
+    "description": "Grants permission to list troubleshooting recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "personalization": {
+    "name": "Personalization",
+    "description": "Grants permission to manage features that enable personalization of the WorkSpaces console experience",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateconsent": {
+    "name": "UpdateConsent",
+    "description": "Grants permission to update the consent agreement to BYOL minimum requirements",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updaterootclientcertificate": {
+    "name": "UpdateRootClientCertificate",
+    "description": "Grants permission to update a root client certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "acceptaccountlinkinvitation": {
+    "name": "AcceptAccountLinkInvitation",
+    "description": "Grants permission to accept invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associateconnectionalias": {
+    "name": "AssociateConnectionAlias",
+    "description": "Grants permission to associate connection aliases with directories",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectionalias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associateipgroups": {
+    "name": "AssociateIpGroups",
+    "description": "Grants permission to associate IP access control groups with directories",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceipgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associateworkspaceapplication": {
+    "name": "AssociateWorkspaceApplication",
+    "description": "Grants permission to associate a workspace application with a WorkSpace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceapplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "authorizeiprules": {
+    "name": "AuthorizeIpRules",
+    "description": "Grants permission to add rules to IP access control groups",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceipgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "copyworkspaceimage": {
+    "name": "CopyWorkspaceImage",
+    "description": "Grants permission to copy a WorkSpace image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceimage",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createaccountlinkinvitation": {
+    "name": "CreateAccountLinkInvitation",
+    "description": "Grants permission to invite other AWS accounts to share the same configuration for WorkSpaces BYOL",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createconnectclientaddin": {
+    "name": "CreateConnectClientAddIn",
+    "description": "Grants permission to create an Amazon Connect client add-in within a directory",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createconnectionalias": {
+    "name": "CreateConnectionAlias",
+    "description": "Grants permission to create connection aliases for use with cross-Region redirection",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createipgroup": {
+    "name": "CreateIpGroup",
+    "description": "Grants permission to create IP access control groups",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createstandbyworkspaces": {
+    "name": "CreateStandbyWorkspaces",
+    "description": "Grants permission to create one or more Standby WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createtags": {
+    "name": "CreateTags",
+    "description": "Grants permission to create tags for WorkSpaces resources",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createupdatedworkspaceimage": {
+    "name": "CreateUpdatedWorkspaceImage",
+    "description": "Grants permission to create an updated WorkSpace image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceimage",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkspacebundle": {
+    "name": "CreateWorkspaceBundle",
+    "description": "Grants permission to create a WorkSpace bundle",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspacebundle",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceimage",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkspaceimage": {
+    "name": "CreateWorkspaceImage",
+    "description": "Grants permission to create a new WorkSpace image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceimage",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkspaces": {
+    "name": "CreateWorkspaces",
+    "description": "Grants permission to create one or more WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "workspacebundle",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkspacespool": {
+    "name": "CreateWorkspacesPool",
+    "description": "Grants permission to create a WorkSpaces Pool",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "workspacebundle",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "workspacespool",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteaccountlinkinvitation": {
+    "name": "DeleteAccountLinkInvitation",
+    "description": "Grants permission to delete invitations to other AWS accounts to share the same configuration for WorkSpaces BYOL",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteclientbranding": {
+    "name": "DeleteClientBranding",
+    "description": "Grants permission to delete AWS WorkSpaces Client branding data within a directory",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteconnectclientaddin": {
+    "name": "DeleteConnectClientAddIn",
+    "description": "Grants permission to delete an Amazon Connect client add-in that is configured within a directory",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteconnectionalias": {
+    "name": "DeleteConnectionAlias",
+    "description": "Grants permission to delete connection aliases",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectionalias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteipgroup": {
+    "name": "DeleteIpGroup",
+    "description": "Grants permission to delete IP access control groups",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceipgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetags": {
+    "name": "DeleteTags",
+    "description": "Grants permission to delete tags from WorkSpaces resources",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteworkspacebundle": {
+    "name": "DeleteWorkspaceBundle",
+    "description": "Grants permission to delete WorkSpace bundles",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspacebundle",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteworkspaceimage": {
+    "name": "DeleteWorkspaceImage",
+    "description": "Grants permission to delete WorkSpace images",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceimage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deployworkspaceapplications": {
+    "name": "DeployWorkspaceApplications",
+    "description": "Grants permission to deploy all pending workspace applications on a WorkSpace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deregisterworkspacedirectory": {
+    "name": "DeregisterWorkspaceDirectory",
+    "description": "Grants permission to deregister directories from use with Amazon WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeaccount": {
+    "name": "DescribeAccount",
+    "description": "Grants permission to retrieve the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeaccountmodifications": {
+    "name": "DescribeAccountModifications",
+    "description": "Grants permission to retrieve modifications to the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeapplicationassociations": {
+    "name": "DescribeApplicationAssociations",
+    "description": "Grants permission to retrieve information about resources associated with a WorkSpace application",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workspaceapplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describeapplications": {
+    "name": "DescribeApplications",
+    "description": "Grants permission to obtain information about WorkSpace applications",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describebundleassociations": {
+    "name": "DescribeBundleAssociations",
+    "description": "Grants permission to retrieve information about resources associated with a WorkSpace bundle",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workspacebundle",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describeclientbranding": {
+    "name": "DescribeClientBranding",
+    "description": "Grants permission to retrieve AWS WorkSpaces Client branding data within a directory",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeclientproperties": {
+    "name": "DescribeClientProperties",
+    "description": "Grants permission to retrieve information about WorkSpaces clients",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeconnectclientaddins": {
+    "name": "DescribeConnectClientAddIns",
+    "description": "Grants permission to retrieve a list of Amazon Connect client add-ins that have been created",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeconnectionaliaspermissions": {
+    "name": "DescribeConnectionAliasPermissions",
+    "description": "Grants permission to retrieve the permissions that the owners of connection aliases have granted to other AWS accounts for connection aliases",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connectionalias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeconnectionaliases": {
+    "name": "DescribeConnectionAliases",
+    "description": "Grants permission to retrieve a list that describes the connection aliases used for cross-Region redirection",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describecustomworkspaceimageimport": {
+    "name": "DescribeCustomWorkspaceImageImport",
+    "description": "Grants permission to retrieve information about WorkSpace BYOL image import task",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeimageassociations": {
+    "name": "DescribeImageAssociations",
+    "description": "Grants permission to retrieve information about resources associated with a WorkSpace image",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workspaceimage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describeipgroups": {
+    "name": "DescribeIpGroups",
+    "description": "Grants permission to retrieve information about IP access control groups",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceipgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describetags": {
+    "name": "DescribeTags",
+    "description": "Grants permission to describe the tags for WorkSpaces resources",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkspaceassociations": {
+    "name": "DescribeWorkspaceAssociations",
+    "description": "Grants permission to retrieve information about resources associated with a WorkSpace",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describeworkspacebundles": {
+    "name": "DescribeWorkspaceBundles",
+    "description": "Grants permission to obtain information about WorkSpace bundles",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkspacedirectories": {
+    "name": "DescribeWorkspaceDirectories",
+    "description": "Grants permission to retrieve information about directories that are registered with WorkSpaces",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkspaceimagepermissions": {
+    "name": "DescribeWorkspaceImagePermissions",
+    "description": "Grants permission to retrieve information about WorkSpace image permissions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceimage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkspaceimages": {
+    "name": "DescribeWorkspaceImages",
+    "description": "Grants permission to retrieve information about WorkSpace images",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkspacesnapshots": {
+    "name": "DescribeWorkspaceSnapshots",
+    "description": "Grants permission to retrieve information about WorkSpace snapshots",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkspaces": {
+    "name": "DescribeWorkspaces",
+    "description": "Grants permission to obtain information about WorkSpaces",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkspacesconnectionstatus": {
+    "name": "DescribeWorkspacesConnectionStatus",
+    "description": "Grants permission to obtain the connection status of WorkSpaces",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkspacespoolsessions": {
+    "name": "DescribeWorkspacesPoolSessions",
+    "description": "Grants permission to retrieve information about the sessions of a WorkSpaces Pool",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workspacespool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeworkspacespools": {
+    "name": "DescribeWorkspacesPools",
+    "description": "Grants permission to retrieve information about WorkSpaces Pools",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociateconnectionalias": {
+    "name": "DisassociateConnectionAlias",
+    "description": "Grants permission to disassociate connection aliases from directories",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectionalias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociateipgroups": {
+    "name": "DisassociateIpGroups",
+    "description": "Grants permission to disassociate IP access control groups from directories",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceipgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociateworkspaceapplication": {
+    "name": "DisassociateWorkspaceApplication",
+    "description": "Grants permission to disassociate a workspace application from a WorkSpace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceapplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getaccountlink": {
+    "name": "GetAccountLink",
+    "description": "Grants permission to retrieve a link with another AWS Account for sharing configuration for WorkSpaces BYOL",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "importclientbranding": {
+    "name": "ImportClientBranding",
+    "description": "Grants permission to import AWS WorkSpaces Client branding data within a directory",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "importcustomworkspaceimage": {
+    "name": "ImportCustomWorkspaceImage",
+    "description": "Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "importworkspaceimage": {
+    "name": "ImportWorkspaceImage",
+    "description": "Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "listaccountlinks": {
+    "name": "ListAccountLinks",
+    "description": "Grants permission to retrieve links with the AWS Account(s) that share your configuration for WorkSpaces BYOL",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listavailablemanagementcidrranges": {
+    "name": "ListAvailableManagementCidrRanges",
+    "description": "Grants permission to list the available CIDR ranges for enabling Bring Your Own License (BYOL) for WorkSpaces accounts",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "migrateworkspace": {
+    "name": "MigrateWorkspace",
+    "description": "Grants permission to migrate WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspacebundle",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyaccount": {
+    "name": "ModifyAccount",
+    "description": "Grants permission to modify the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifycertificatebasedauthproperties": {
+    "name": "ModifyCertificateBasedAuthProperties",
+    "description": "Grants permission to modify the certificate-based authorization properties of a directory",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyclientproperties": {
+    "name": "ModifyClientProperties",
+    "description": "Grants permission to modify the properties of WorkSpaces clients",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyendpointencryptionmode": {
+    "name": "ModifyEndpointEncryptionMode",
+    "description": "Grants permission to configure the specified directory between Standard TLS and FIPS 140-2 validated mode",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifysamlproperties": {
+    "name": "ModifySamlProperties",
+    "description": "Grants permission to modify the SAML properties of a directory",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyselfservicepermissions": {
+    "name": "ModifySelfservicePermissions",
+    "description": "Grants permission to modify the self-service WorkSpace management capabilities for your users",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifystreamingproperties": {
+    "name": "ModifyStreamingProperties",
+    "description": "Grants permission to modify the streaming properties",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyworkspaceaccessproperties": {
+    "name": "ModifyWorkspaceAccessProperties",
+    "description": "Grants permission to specify which devices and operating systems users can use to access their WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyworkspacecreationproperties": {
+    "name": "ModifyWorkspaceCreationProperties",
+    "description": "Grants permission to modify the default properties used to create WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyworkspaceproperties": {
+    "name": "ModifyWorkspaceProperties",
+    "description": "Grants permission to modify WorkSpace properties, including the running mode and the AutoStop period",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyworkspacestate": {
+    "name": "ModifyWorkspaceState",
+    "description": "Grants permission to modify the state of WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rebootworkspaces": {
+    "name": "RebootWorkspaces",
+    "description": "Grants permission to reboot WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rebuildworkspaces": {
+    "name": "RebuildWorkspaces",
+    "description": "Grants permission to rebuild WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "registerworkspacedirectory": {
+    "name": "RegisterWorkspaceDirectory",
+    "description": "Grants permission to register directories for use with Amazon WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "rejectaccountlinkinvitation": {
+    "name": "RejectAccountLinkInvitation",
+    "description": "Grants permission to reject invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "restoreworkspace": {
+    "name": "RestoreWorkspace",
+    "description": "Grants permission to restore WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "revokeiprules": {
+    "name": "RevokeIpRules",
+    "description": "Grants permission to remove rules from IP access control groups",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceipgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startworkspaces": {
+    "name": "StartWorkspaces",
+    "description": "Grants permission to start AutoStop WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startworkspacespool": {
+    "name": "StartWorkspacesPool",
+    "description": "Grants permission to start a WorkSpaces Pool",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspacespool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopworkspaces": {
+    "name": "StopWorkspaces",
+    "description": "Grants permission to stop AutoStop WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopworkspacespool": {
+    "name": "StopWorkspacesPool",
+    "description": "Grants permission to stop a WorkSpaces Pool",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspacespool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stream": {
+    "name": "Stream",
+    "description": "Grants permission to federated users to sign in by using their existing credentials and stream their workspace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "workspaces:userId"
+    ],
+    "dependentActions": []
+  },
+  "terminateworkspaces": {
+    "name": "TerminateWorkspaces",
+    "description": "Grants permission to terminate WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "terminateworkspacespool": {
+    "name": "TerminateWorkspacesPool",
+    "description": "Grants permission to terminate a WorkSpaces Pool",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspacespool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "terminateworkspacespoolsession": {
+    "name": "TerminateWorkspacesPoolSession",
+    "description": "Grants permission to terminate a WorkSpaces Pool session",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateconnectclientaddin": {
+    "name": "UpdateConnectClientAddIn",
+    "description": "Grants permission to update an Amazon Connect client add-in. Use this action to update the name and endpoint URL of an Amazon Connect client add-in",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateconnectionaliaspermission": {
+    "name": "UpdateConnectionAliasPermission",
+    "description": "Grants permission to share or unshare connection aliases with other accounts",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "connectionalias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updaterulesofipgroup": {
+    "name": "UpdateRulesOfIpGroup",
+    "description": "Grants permission to replace rules for IP access control groups",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceipgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateworkspacebundle": {
+    "name": "UpdateWorkspaceBundle",
+    "description": "Grants permission to update the WorkSpace images used in WorkSpace bundles",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspacebundle",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workspaceimage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateworkspaceimagepermission": {
+    "name": "UpdateWorkspaceImagePermission",
+    "description": "Grants permission to share or unshare WorkSpace images with other accounts by specifying whether other accounts have permission to copy the image",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "workspaceimage",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateworkspacespool": {
+    "name": "UpdateWorkspacesPool",
+    "description": "Grants permission to update the WorkSpaces pool",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspacespool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}