@cloud-copilot/iam-data 0.0.1

package/data/actions/iot.json

@@ -0,0 +1,4181 @@
+{
+  "AcceptCertificateTransfer": {
+    "name": "AcceptCertificateTransfer",
+    "description": "Grants permission to accept a pending certificate transfer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "AddThingToBillingGroup": {
+    "name": "AddThingToBillingGroup",
+    "description": "Grants permission to add a thing to the specified billing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "billinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "AddThingToThingGroup": {
+    "name": "AddThingToThingGroup",
+    "description": "Grants permission to add a thing to the specified thing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "AssociateTargetsWithJob": {
+    "name": "AssociateTargetsWithJob",
+    "description": "Grants permission to associate a group with a continuous job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "AttachPolicy": {
+    "name": "AttachPolicy",
+    "description": "Grants permission to attach a policy to the specified target",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "AttachPrincipalPolicy": {
+    "name": "AttachPrincipalPolicy",
+    "description": "Grants permission to attach the specified policy to the specified principal (certificate or other credential)",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "AttachSecurityProfile": {
+    "name": "AttachSecurityProfile",
+    "description": "Grants permission to associate a Device Defender security profile with a thing group or with this account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custommetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dimension",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "AttachThingPrincipal": {
+    "name": "AttachThingPrincipal",
+    "description": "Grants permission to attach the specified principal to the specified thing",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CancelAuditMitigationActionsTask": {
+    "name": "CancelAuditMitigationActionsTask",
+    "description": "Grants permission to cancel a mitigation action task that is in progress",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CancelAuditTask": {
+    "name": "CancelAuditTask",
+    "description": "Grants permission to cancel an audit that is in progress. The audit can be either scheduled or on-demand",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CancelCertificateTransfer": {
+    "name": "CancelCertificateTransfer",
+    "description": "Grants permission to cancel a pending transfer for the specified certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CancelDetectMitigationActionsTask": {
+    "name": "CancelDetectMitigationActionsTask",
+    "description": "Grants permission to cancel a Device Defender ML Detect mitigation action",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CancelJob": {
+    "name": "CancelJob",
+    "description": "Grants permission to cancel a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CancelJobExecution": {
+    "name": "CancelJobExecution",
+    "description": "Grants permission to cancel a job execution on a particular device",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ClearDefaultAuthorizer": {
+    "name": "ClearDefaultAuthorizer",
+    "description": "Grants permission to clear the default authorizer",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CloseTunnel": {
+    "name": "CloseTunnel",
+    "description": "Grants permission to close a tunnel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "tunnel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "iot:Delete"
+    ],
+    "dependentActions": []
+  },
+  "ConfirmTopicRuleDestination": {
+    "name": "ConfirmTopicRuleDestination",
+    "description": "Grants permission to confirm a http url TopicRuleDestinationDestination",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "destination",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "Connect": {
+    "name": "Connect",
+    "description": "Grants permission to connect as the specified client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "client",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateAuditSuppression": {
+    "name": "CreateAuditSuppression",
+    "description": "Grants permission to create a Device Defender audit suppression",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateAuthorizer": {
+    "name": "CreateAuthorizer",
+    "description": "Grants permission to create an authorizer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "authorizer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateBillingGroup": {
+    "name": "CreateBillingGroup",
+    "description": "Grants permission to create a billing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "billinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateCertificateFromCsr": {
+    "name": "CreateCertificateFromCsr",
+    "description": "Grants permission to create an X.509 certificate using the specified certificate signing request",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateCertificateProvider": {
+    "name": "CreateCertificateProvider",
+    "description": "Grants permission to create a certificate provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateprovider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateCustomMetric": {
+    "name": "CreateCustomMetric",
+    "description": "Grants permission to create a custom metric for device side metric reporting and monitoring",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "custommetric",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateDimension": {
+    "name": "CreateDimension",
+    "description": "Grants permission to define a dimension that can be used to to limit the scope of a metric used in a security profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dimension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateDomainConfiguration": {
+    "name": "CreateDomainConfiguration",
+    "description": "Grants permission to create a domain configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domainconfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "iot:DomainName"
+    ],
+    "dependentActions": []
+  },
+  "CreateDynamicThingGroup": {
+    "name": "CreateDynamicThingGroup",
+    "description": "Grants permission to create a Dynamic Thing Group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dynamicthinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateFleetMetric": {
+    "name": "CreateFleetMetric",
+    "description": "Grants permission to create a fleet metric",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "fleetmetric",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateJob": {
+    "name": "CreateJob",
+    "description": "Grants permission to create a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "jobtemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "package",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "packageversion",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateJobTemplate": {
+    "name": "CreateJobTemplate",
+    "description": "Grants permission to create a job template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "jobtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "package",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "packageversion",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateKeysAndCertificate": {
+    "name": "CreateKeysAndCertificate",
+    "description": "Grants permission to create a 2048 bit RSA key pair and issues an X.509 certificate using the issued public key",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateMitigationAction": {
+    "name": "CreateMitigationAction",
+    "description": "Grants permission to define an action that can be applied to audit findings by using StartAuditMitigationActionsTask",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mitigationaction",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateOTAUpdate": {
+    "name": "CreateOTAUpdate",
+    "description": "Grants permission to create an OTA update job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "otaupdate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreatePackage": {
+    "name": "CreatePackage",
+    "description": "Grants permission to create a software package that you can deploy to your devices",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iot:GetIndexingConfiguration"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreatePackageVersion": {
+    "name": "CreatePackageVersion",
+    "description": "Grants permission to create a version under the specified package",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iot:GetIndexingConfiguration"
+        ]
+      },
+      {
+        "name": "packageversion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreatePolicy": {
+    "name": "CreatePolicy",
+    "description": "Grants permission to create an AWS IoT policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreatePolicyVersion": {
+    "name": "CreatePolicyVersion",
+    "description": "Grants permission to create a new version of the specified AWS IoT policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateProvisioningClaim": {
+    "name": "CreateProvisioningClaim",
+    "description": "Grants permission to create a provisioning claim",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "provisioningtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateProvisioningTemplate": {
+    "name": "CreateProvisioningTemplate",
+    "description": "Grants permission to create a fleet provisioning template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "provisioningtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:PassRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateProvisioningTemplateVersion": {
+    "name": "CreateProvisioningTemplateVersion",
+    "description": "Grants permission to create a new version of a fleet provisioning template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "provisioningtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateRoleAlias": {
+    "name": "CreateRoleAlias",
+    "description": "Grants permission to create a role alias",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rolealias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:PassRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateScheduledAudit": {
+    "name": "CreateScheduledAudit",
+    "description": "Grants permission to create a scheduled audit that is run at a specified time interval",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scheduledaudit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateSecurityProfile": {
+    "name": "CreateSecurityProfile",
+    "description": "Grants permission to create a Device Defender security profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custommetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dimension",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateStream": {
+    "name": "CreateStream",
+    "description": "Grants permission to create a new AWS IoT stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateThing": {
+    "name": "CreateThing",
+    "description": "Grants permission to create a thing in the thing registry",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "billinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "CreateThingGroup": {
+    "name": "CreateThingGroup",
+    "description": "Grants permission to create a thing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateThingType": {
+    "name": "CreateThingType",
+    "description": "Grants permission to create a new thing type",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thingtype",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateTopicRule": {
+    "name": "CreateTopicRule",
+    "description": "Grants permission to create a rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "CreateTopicRuleDestination": {
+    "name": "CreateTopicRuleDestination",
+    "description": "Grants permission to create a TopicRuleDestination",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "destination",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteAccountAuditConfiguration": {
+    "name": "DeleteAccountAuditConfiguration",
+    "description": "Grants permission to delete the audit configuration associated with the account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteAuditSuppression": {
+    "name": "DeleteAuditSuppression",
+    "description": "Grants permission to delete a Device Defender audit suppression",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteAuthorizer": {
+    "name": "DeleteAuthorizer",
+    "description": "Grants permission to delete the specified authorizer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "authorizer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteBillingGroup": {
+    "name": "DeleteBillingGroup",
+    "description": "Grants permission to delete the specified billing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "billinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteCACertificate": {
+    "name": "DeleteCACertificate",
+    "description": "Grants permission to delete a registered CA certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cacert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteCertificate": {
+    "name": "DeleteCertificate",
+    "description": "Grants permission to delete the specified certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteCertificateProvider": {
+    "name": "DeleteCertificateProvider",
+    "description": "Grants permission to delete a certificate provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateprovider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteCustomMetric": {
+    "name": "DeleteCustomMetric",
+    "description": "Grants permission to deletes the specified custom metric from your AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "custommetric",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteDimension": {
+    "name": "DeleteDimension",
+    "description": "Grants permission to remove the specified dimension from your AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dimension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteDomainConfiguration": {
+    "name": "DeleteDomainConfiguration",
+    "description": "Grants permission to delete a domain configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domainconfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteDynamicThingGroup": {
+    "name": "DeleteDynamicThingGroup",
+    "description": "Grants permission to delete the specified Dynamic Thing Group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dynamicthinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteFleetMetric": {
+    "name": "DeleteFleetMetric",
+    "description": "Grants permission to delete the specified fleet metric",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "fleetmetric",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteJob": {
+    "name": "DeleteJob",
+    "description": "Grants permission to delete a job and its related job executions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteJobExecution": {
+    "name": "DeleteJobExecution",
+    "description": "Grants permission to delete a job execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteJobTemplate": {
+    "name": "DeleteJobTemplate",
+    "description": "Grants permission to delete a job template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "jobtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteMitigationAction": {
+    "name": "DeleteMitigationAction",
+    "description": "Grants permission to delete a defined mitigation action from your AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mitigationaction",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteOTAUpdate": {
+    "name": "DeleteOTAUpdate",
+    "description": "Grants permission to delete an OTA update job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "otaupdate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeletePackage": {
+    "name": "DeletePackage",
+    "description": "Grants permission to delete a package",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeletePackageVersion": {
+    "name": "DeletePackageVersion",
+    "description": "Grants permission to delete a version of the specified package",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "packageversion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeletePolicy": {
+    "name": "DeletePolicy",
+    "description": "Grants permission to delete the specified policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeletePolicyVersion": {
+    "name": "DeletePolicyVersion",
+    "description": "Grants permission to Delete the specified version of the specified policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteProvisioningTemplate": {
+    "name": "DeleteProvisioningTemplate",
+    "description": "Grants permission to delete a fleet provisioning template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "provisioningtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteProvisioningTemplateVersion": {
+    "name": "DeleteProvisioningTemplateVersion",
+    "description": "Grants permission to delete a fleet provisioning template version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "provisioningtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteRegistrationCode": {
+    "name": "DeleteRegistrationCode",
+    "description": "Grants permission to delete a CA certificate registration code",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteRoleAlias": {
+    "name": "DeleteRoleAlias",
+    "description": "Grants permission to delete the specified role alias",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rolealias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteScheduledAudit": {
+    "name": "DeleteScheduledAudit",
+    "description": "Grants permission to delete a scheduled audit",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scheduledaudit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteSecurityProfile": {
+    "name": "DeleteSecurityProfile",
+    "description": "Grants permission to delete a Device Defender security profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custommetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dimension",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteStream": {
+    "name": "DeleteStream",
+    "description": "Grants permission to delete a specified stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteThing": {
+    "name": "DeleteThing",
+    "description": "Grants permission to delete the specified thing",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteThingGroup": {
+    "name": "DeleteThingGroup",
+    "description": "Grants permission to delete the specified thing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteThingShadow": {
+    "name": "DeleteThingShadow",
+    "description": "Grants permission to delete the specified thing shadow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteThingType": {
+    "name": "DeleteThingType",
+    "description": "Grants permission to delete the specified thing type",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thingtype",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteTopicRule": {
+    "name": "DeleteTopicRule",
+    "description": "Grants permission to delete the specified rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteTopicRuleDestination": {
+    "name": "DeleteTopicRuleDestination",
+    "description": "Grants permission to delete a TopicRuleDestination",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "destination",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeleteV2LoggingLevel": {
+    "name": "DeleteV2LoggingLevel",
+    "description": "Grants permission to delete the specified v2 logging level",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DeprecateThingType": {
+    "name": "DeprecateThingType",
+    "description": "Grants permission to deprecate the specified thing type",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thingtype",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeAccountAuditConfiguration": {
+    "name": "DescribeAccountAuditConfiguration",
+    "description": "Grants permission to get information about audit configurations for the account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeAuditFinding": {
+    "name": "DescribeAuditFinding",
+    "description": "Grants permission to get information about a single audit finding. Properties include the reason for noncompliance, the severity of the issue, and when the audit that returned the finding was started",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeAuditMitigationActionsTask": {
+    "name": "DescribeAuditMitigationActionsTask",
+    "description": "Grants permission to get information about an audit mitigation task that is used to apply mitigation actions to a set of audit findings",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeAuditSuppression": {
+    "name": "DescribeAuditSuppression",
+    "description": "Grants permission to get information about a Device Defender audit suppression",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeAuditTask": {
+    "name": "DescribeAuditTask",
+    "description": "Grants permission to get information about a Device Defender audit",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeAuthorizer": {
+    "name": "DescribeAuthorizer",
+    "description": "Grants permission to describe an authorizer",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "authorizer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeBillingGroup": {
+    "name": "DescribeBillingGroup",
+    "description": "Grants permission to get information about the specified billing group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "billinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeCACertificate": {
+    "name": "DescribeCACertificate",
+    "description": "Grants permission to describe a registered CA certificate",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cacert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeCertificate": {
+    "name": "DescribeCertificate",
+    "description": "Grants permission to get information about the specified certificate",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeCertificateProvider": {
+    "name": "DescribeCertificateProvider",
+    "description": "Grants permission to describe a certificate provider",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "certificateprovider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeCustomMetric": {
+    "name": "DescribeCustomMetric",
+    "description": "Grants permission to describe a custom metric that is defined in your AWS account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "custommetric",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeDefaultAuthorizer": {
+    "name": "DescribeDefaultAuthorizer",
+    "description": "Grants permission to describe the default authorizer",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeDetectMitigationActionsTask": {
+    "name": "DescribeDetectMitigationActionsTask",
+    "description": "Grants permission to describe a Device Defender ML Detect mitigation action",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeDimension": {
+    "name": "DescribeDimension",
+    "description": "Grants permission to get details about a dimension that is defined in your AWS account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dimension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeDomainConfiguration": {
+    "name": "DescribeDomainConfiguration",
+    "description": "Grants permission to get information about the domain configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domainconfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeEndpoint": {
+    "name": "DescribeEndpoint",
+    "description": "Grants permission to get a unique endpoint specific to the AWS account making the call",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeEventConfigurations": {
+    "name": "DescribeEventConfigurations",
+    "description": "Grants permission to get account event configurations",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeFleetMetric": {
+    "name": "DescribeFleetMetric",
+    "description": "Grants permission to get information about the specified fleet metric",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "fleetmetric",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeIndex": {
+    "name": "DescribeIndex",
+    "description": "Grants permission to get information about the specified index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeJob": {
+    "name": "DescribeJob",
+    "description": "Grants permission to describe a job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeJobExecution": {
+    "name": "DescribeJobExecution",
+    "description": "Grants permission to describe a job execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeJobTemplate": {
+    "name": "DescribeJobTemplate",
+    "description": "Grants permission to describe a job template",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "jobtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeManagedJobTemplate": {
+    "name": "DescribeManagedJobTemplate",
+    "description": "Grants permission to describe a managed job template",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "jobtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeMitigationAction": {
+    "name": "DescribeMitigationAction",
+    "description": "Grants permission to get information about a mitigation action",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mitigationaction",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeProvisioningTemplate": {
+    "name": "DescribeProvisioningTemplate",
+    "description": "Grants permission to get information about a fleet provisioning template",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provisioningtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeProvisioningTemplateVersion": {
+    "name": "DescribeProvisioningTemplateVersion",
+    "description": "Grants permission to get information about a fleet provisioning template version",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provisioningtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeRoleAlias": {
+    "name": "DescribeRoleAlias",
+    "description": "Grants permission to describe a role alias",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "rolealias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeScheduledAudit": {
+    "name": "DescribeScheduledAudit",
+    "description": "Grants permission to get information about a scheduled audit",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scheduledaudit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeSecurityProfile": {
+    "name": "DescribeSecurityProfile",
+    "description": "Grants permission to get information about a Device Defender security profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeStream": {
+    "name": "DescribeStream",
+    "description": "Grants permission to get information about the specified stream",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeThing": {
+    "name": "DescribeThing",
+    "description": "Grants permission to get information about the specified thing",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeThingGroup": {
+    "name": "DescribeThingGroup",
+    "description": "Grants permission to get information about the specified thing group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "thinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeThingRegistrationTask": {
+    "name": "DescribeThingRegistrationTask",
+    "description": "Grants permission to get information about the bulk thing registration task",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeThingType": {
+    "name": "DescribeThingType",
+    "description": "Grants permission to get information about the specified thing type",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "thingtype",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DescribeTunnel": {
+    "name": "DescribeTunnel",
+    "description": "Grants permission to describe a tunnel",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "tunnel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DetachPolicy": {
+    "name": "DetachPolicy",
+    "description": "Grants permission to detach a policy from the specified target",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DetachPrincipalPolicy": {
+    "name": "DetachPrincipalPolicy",
+    "description": "Grants permission to remove the specified policy from the specified certificate",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DetachSecurityProfile": {
+    "name": "DetachSecurityProfile",
+    "description": "Grants permission to disassociate a Device Defender security profile from a thing group or from this account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custommetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dimension",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DetachThingPrincipal": {
+    "name": "DetachThingPrincipal",
+    "description": "Grants permission to detach the specified principal from the specified thing",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "DisableTopicRule": {
+    "name": "DisableTopicRule",
+    "description": "Grants permission to disable the specified rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "EnableTopicRule": {
+    "name": "EnableTopicRule",
+    "description": "Grants permission to enable the specified rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetBehaviorModelTrainingSummaries": {
+    "name": "GetBehaviorModelTrainingSummaries",
+    "description": "Grants permission to fetch a Device Defender's ML Detect Security Profile training model's status",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetBucketsAggregation": {
+    "name": "GetBucketsAggregation",
+    "description": "Grants permission to get buckets aggregation for IoT fleet index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetCardinality": {
+    "name": "GetCardinality",
+    "description": "Grants permission to get cardinality for IoT fleet index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetEffectivePolicies": {
+    "name": "GetEffectivePolicies",
+    "description": "Grants permission to get effective policies",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetIndexingConfiguration": {
+    "name": "GetIndexingConfiguration",
+    "description": "Grants permission to get current fleet indexing configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetJobDocument": {
+    "name": "GetJobDocument",
+    "description": "Grants permission to get a job document",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetLoggingOptions": {
+    "name": "GetLoggingOptions",
+    "description": "Grants permission to get the logging options",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetOTAUpdate": {
+    "name": "GetOTAUpdate",
+    "description": "Grants permission to get the information about the OTA update job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "otaupdate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetPackage": {
+    "name": "GetPackage",
+    "description": "Grants permission to get the information about the package",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetPackageConfiguration": {
+    "name": "GetPackageConfiguration",
+    "description": "Grants permission to get the package configuration of the account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetPackageVersion": {
+    "name": "GetPackageVersion",
+    "description": "Grants permission to get the version of the package",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "packageversion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetPercentiles": {
+    "name": "GetPercentiles",
+    "description": "Grants permission to get percentiles for IoT fleet index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetPolicy": {
+    "name": "GetPolicy",
+    "description": "Grants permission to get information about the specified policy with the policy document of the default version",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetPolicyVersion": {
+    "name": "GetPolicyVersion",
+    "description": "Grants permission to get information about the specified policy version",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetRegistrationCode": {
+    "name": "GetRegistrationCode",
+    "description": "Grants permission to get a registration code used to register a CA certificate with AWS IoT",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetRetainedMessage": {
+    "name": "GetRetainedMessage",
+    "description": "Grants permission to get the retained message on the specified topic",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetStatistics": {
+    "name": "GetStatistics",
+    "description": "Grants permission to get statistics for IoT fleet index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetThingShadow": {
+    "name": "GetThingShadow",
+    "description": "Grants permission to get the thing shadow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetTopicRule": {
+    "name": "GetTopicRule",
+    "description": "Grants permission to get information about the specified rule",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetTopicRuleDestination": {
+    "name": "GetTopicRuleDestination",
+    "description": "Grants permission to get a TopicRuleDestination",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "destination",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "GetV2LoggingOptions": {
+    "name": "GetV2LoggingOptions",
+    "description": "Grants permission to get v2 logging options",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListActiveViolations": {
+    "name": "ListActiveViolations",
+    "description": "Grants permission to list the active violations for a given Device Defender security profile or Thing",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListAttachedPolicies": {
+    "name": "ListAttachedPolicies",
+    "description": "Grants permission to list the policies attached to the specified thing group",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListAuditFindings": {
+    "name": "ListAuditFindings",
+    "description": "Grants permission to list the findings (results) of a Device Defender audit or of the audits performed during a specified time period",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListAuditMitigationActionsExecutions": {
+    "name": "ListAuditMitigationActionsExecutions",
+    "description": "Grants permission to get the status of audit mitigation action tasks that were executed",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListAuditMitigationActionsTasks": {
+    "name": "ListAuditMitigationActionsTasks",
+    "description": "Grants permission to get a list of audit mitigation action tasks that match the specified filters",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListAuditSuppressions": {
+    "name": "ListAuditSuppressions",
+    "description": "Grants permission to list your Device Defender audit suppressions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListAuditTasks": {
+    "name": "ListAuditTasks",
+    "description": "Grants permission to list the Device Defender audits that have been performed during a given time period",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListAuthorizers": {
+    "name": "ListAuthorizers",
+    "description": "Grants permission to list the authorizers registered in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListBillingGroups": {
+    "name": "ListBillingGroups",
+    "description": "Grants permission to list all billing groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListCACertificates": {
+    "name": "ListCACertificates",
+    "description": "Grants permission to list the CA certificates registered for your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListCertificateProviders": {
+    "name": "ListCertificateProviders",
+    "description": "Grants permission to list certificate providers in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListCertificates": {
+    "name": "ListCertificates",
+    "description": "Grants permission to list your certificates",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListCertificatesByCA": {
+    "name": "ListCertificatesByCA",
+    "description": "Grants permission to list the device certificates signed by the specified CA certificate",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListCustomMetrics": {
+    "name": "ListCustomMetrics",
+    "description": "Grants permission to list the custom metrics in your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListDetectMitigationActionsExecutions": {
+    "name": "ListDetectMitigationActionsExecutions",
+    "description": "Grants permission to lists mitigation actions executions for a Device Defender ML Detect Security Profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListDetectMitigationActionsTasks": {
+    "name": "ListDetectMitigationActionsTasks",
+    "description": "Grants permission to list Device Defender ML Detect mitigation actions tasks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListDimensions": {
+    "name": "ListDimensions",
+    "description": "Grants permission to list the dimensions that are defined for your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListDomainConfigurations": {
+    "name": "ListDomainConfigurations",
+    "description": "Grants permission to list the domain configuration created by your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListFleetMetrics": {
+    "name": "ListFleetMetrics",
+    "description": "Grants permission to list the fleet metrics in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListIndices": {
+    "name": "ListIndices",
+    "description": "Grants permission to list all indices for fleet index",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListJobExecutionsForJob": {
+    "name": "ListJobExecutionsForJob",
+    "description": "Grants permission to list the job executions for a job",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListJobExecutionsForThing": {
+    "name": "ListJobExecutionsForThing",
+    "description": "Grants permission to list the job executions for the specified thing",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListJobTemplates": {
+    "name": "ListJobTemplates",
+    "description": "Grants permission to list job templates",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListJobs": {
+    "name": "ListJobs",
+    "description": "Grants permission to list jobs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListManagedJobTemplates": {
+    "name": "ListManagedJobTemplates",
+    "description": "Grants permission to list managed job templates",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListMetricValues": {
+    "name": "ListMetricValues",
+    "description": "Grants permissions to list the metric values for a thing based on the metricName, and dimension if specified",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListMitigationActions": {
+    "name": "ListMitigationActions",
+    "description": "Grants permission to get a list of all mitigation actions that match the specified filter criteria",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListNamedShadowsForThing": {
+    "name": "ListNamedShadowsForThing",
+    "description": "Grants permission to list all named shadows for a given thing",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListOTAUpdates": {
+    "name": "ListOTAUpdates",
+    "description": "Grants permission to list OTA update jobs in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListOutgoingCertificates": {
+    "name": "ListOutgoingCertificates",
+    "description": "Grants permission to list certificates that are being transfered but not yet accepted",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListPackageVersions": {
+    "name": "ListPackageVersions",
+    "description": "Grants permission to list versions for a package in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListPackages": {
+    "name": "ListPackages",
+    "description": "Grants permission to list packages in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListPolicies": {
+    "name": "ListPolicies",
+    "description": "Grants permission to list your policies",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListPolicyPrincipals": {
+    "name": "ListPolicyPrincipals",
+    "description": "Grants permission to list the principals associated with the specified policy",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListPolicyVersions": {
+    "name": "ListPolicyVersions",
+    "description": "Grants permission to list the versions of the specified policy, and identifies the default version",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListPrincipalPolicies": {
+    "name": "ListPrincipalPolicies",
+    "description": "Grants permission to list the policies attached to the specified principal. If you use an Amazon Cognito identity, the ID needs to be in Amazon Cognito Identity format",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListPrincipalThings": {
+    "name": "ListPrincipalThings",
+    "description": "Grants permission to list the things associated with the specified principal",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListProvisioningTemplateVersions": {
+    "name": "ListProvisioningTemplateVersions",
+    "description": "Grants permission to get a list of fleet provisioning template versions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "provisioningtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListProvisioningTemplates": {
+    "name": "ListProvisioningTemplates",
+    "description": "Grants permission to list the fleet provisioning templates in your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListRelatedResourcesForAuditFinding": {
+    "name": "ListRelatedResourcesForAuditFinding",
+    "description": "Grants permission to list related resources for a single audit finding",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListRetainedMessages": {
+    "name": "ListRetainedMessages",
+    "description": "Grants permission to list the retained messages for your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListRoleAliases": {
+    "name": "ListRoleAliases",
+    "description": "Grants permission to list role aliases",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListScheduledAudits": {
+    "name": "ListScheduledAudits",
+    "description": "Grants permission to list all of your scheduled audits",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListSecurityProfiles": {
+    "name": "ListSecurityProfiles",
+    "description": "Grants permission to list the Device Defender security profiles you have created",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "custommetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dimension",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListSecurityProfilesForTarget": {
+    "name": "ListSecurityProfilesForTarget",
+    "description": "Grants permission to list the Device Defender security profiles attached to a target",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "thinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListStreams": {
+    "name": "ListStreams",
+    "description": "Grants permission to list the streams in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListTagsForResource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list all tags for a given resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "authorizer",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "billinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cacert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "certificateprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custommetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dimension",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "domainconfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dynamicthinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "fleetmetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "jobtemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "mitigationaction",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "otaupdate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "provisioningtemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "rolealias",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "scheduledaudit",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "securityprofile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "stream",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thingtype",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListTargetsForPolicy": {
+    "name": "ListTargetsForPolicy",
+    "description": "Grants permission to list targets for the specified policy",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListTargetsForSecurityProfile": {
+    "name": "ListTargetsForSecurityProfile",
+    "description": "Grants permission to list the targets associated with a given Device Defender security profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListThingGroups": {
+    "name": "ListThingGroups",
+    "description": "Grants permission to list all thing groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListThingGroupsForThing": {
+    "name": "ListThingGroupsForThing",
+    "description": "Grants permission to list thing groups to which the specified thing belongs",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListThingPrincipals": {
+    "name": "ListThingPrincipals",
+    "description": "Grants permission to list the principals associated with the specified thing",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListThingRegistrationTaskReports": {
+    "name": "ListThingRegistrationTaskReports",
+    "description": "Grants permission to list information about bulk thing registration tasks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListThingRegistrationTasks": {
+    "name": "ListThingRegistrationTasks",
+    "description": "Grants permission to list bulk thing registration tasks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListThingTypes": {
+    "name": "ListThingTypes",
+    "description": "Grants permission to list all thing types",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListThings": {
+    "name": "ListThings",
+    "description": "Grants permission to list all things",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListThingsInBillingGroup": {
+    "name": "ListThingsInBillingGroup",
+    "description": "Grants permission to list all things in the specified billing group",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "billinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListThingsInThingGroup": {
+    "name": "ListThingsInThingGroup",
+    "description": "Grants permission to list all things in the specified thing group",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "thinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListTopicRuleDestinations": {
+    "name": "ListTopicRuleDestinations",
+    "description": "Grants permission to list all TopicRuleDestinations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListTopicRules": {
+    "name": "ListTopicRules",
+    "description": "Grants permission to list the rules for the specific topic",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListTunnels": {
+    "name": "ListTunnels",
+    "description": "Grants permission to list tunnels",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListV2LoggingLevels": {
+    "name": "ListV2LoggingLevels",
+    "description": "Grants permission to list the v2 logging levels",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ListViolationEvents": {
+    "name": "ListViolationEvents",
+    "description": "Grants permission to list the Device Defender security profile violations discovered during the given time period",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "OpenTunnel": {
+    "name": "OpenTunnel",
+    "description": "Grants permission to open a tunnel",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "iot:ThingGroupArn",
+      "iot:TunnelDestinationService"
+    ],
+    "dependentActions": []
+  },
+  "Publish": {
+    "name": "Publish",
+    "description": "Grants permission to publish to the specified topic",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "PutVerificationStateOnViolation": {
+    "name": "PutVerificationStateOnViolation",
+    "description": "Grants permission to put verification state on a violation",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "Receive": {
+    "name": "Receive",
+    "description": "Grants permission to receive from the specified topic",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RegisterCACertificate": {
+    "name": "RegisterCACertificate",
+    "description": "Grants permission to register a CA certificate with AWS IoT",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
+  "RegisterCertificate": {
+    "name": "RegisterCertificate",
+    "description": "Grants permission to register a device certificate with AWS IoT",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RegisterCertificateWithoutCA": {
+    "name": "RegisterCertificateWithoutCA",
+    "description": "Grants permission to register a device certificate with AWS IoT without a registered CA (certificate authority)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RegisterThing": {
+    "name": "RegisterThing",
+    "description": "Grants permission to register your thing",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RejectCertificateTransfer": {
+    "name": "RejectCertificateTransfer",
+    "description": "Grants permission to reject a pending certificate transfer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RemoveThingFromBillingGroup": {
+    "name": "RemoveThingFromBillingGroup",
+    "description": "Grants permission to remove thing from the specified billing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "billinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RemoveThingFromThingGroup": {
+    "name": "RemoveThingFromThingGroup",
+    "description": "Grants permission to remove thing from the specified thing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ReplaceTopicRule": {
+    "name": "ReplaceTopicRule",
+    "description": "Grants permission to replace the specified rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RetainPublish": {
+    "name": "RetainPublish",
+    "description": "Grants permission to publish a retained message to the specified topic",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "RotateTunnelAccessToken": {
+    "name": "RotateTunnelAccessToken",
+    "description": "Grants permission to rotate the access token of a tunnel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "tunnel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "iot:ThingGroupArn",
+      "iot:TunnelDestinationService",
+      "iot:ClientMode"
+    ],
+    "dependentActions": []
+  },
+  "SearchIndex": {
+    "name": "SearchIndex",
+    "description": "Grants permission to search IoT fleet index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "SetDefaultAuthorizer": {
+    "name": "SetDefaultAuthorizer",
+    "description": "Grants permission to set the default authorizer. This will be used if a websocket connection is made without specifying an authorizer",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "authorizer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "SetDefaultPolicyVersion": {
+    "name": "SetDefaultPolicyVersion",
+    "description": "Grants permission to set the specified version of the specified policy as the policy's default (operative) version",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "SetLoggingOptions": {
+    "name": "SetLoggingOptions",
+    "description": "Grants permission to set the logging options",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "SetV2LoggingLevel": {
+    "name": "SetV2LoggingLevel",
+    "description": "Grants permission to set the v2 logging level",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "SetV2LoggingOptions": {
+    "name": "SetV2LoggingOptions",
+    "description": "Grants permission to set the v2 logging options",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "StartAuditMitigationActionsTask": {
+    "name": "StartAuditMitigationActionsTask",
+    "description": "Grants permission to start a task that applies a set of mitigation actions to the specified target",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "StartDetectMitigationActionsTask": {
+    "name": "StartDetectMitigationActionsTask",
+    "description": "Grants permission to start a Device Defender ML Detect mitigation actions task",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "StartOnDemandAuditTask": {
+    "name": "StartOnDemandAuditTask",
+    "description": "Grants permission to start an on-demand Device Defender audit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "StartThingRegistrationTask": {
+    "name": "StartThingRegistrationTask",
+    "description": "Grants permission to start a bulk thing registration task",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "StopThingRegistrationTask": {
+    "name": "StopThingRegistrationTask",
+    "description": "Grants permission to stop a bulk thing registration task",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "Subscribe": {
+    "name": "Subscribe",
+    "description": "Grants permission to subscribe to the specified TopicFilter",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "topicfilter",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "TagResource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "authorizer",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "billinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cacert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "certificateprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custommetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dimension",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "domainconfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dynamicthinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "fleetmetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "jobtemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "mitigationaction",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "otaupdate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "package",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "packageversion",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "provisioningtemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "rolealias",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "scheduledaudit",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "securityprofile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "stream",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thingtype",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "TestAuthorization": {
+    "name": "TestAuthorization",
+    "description": "Grants permission to test the policies evaluation for group policies",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "TestInvokeAuthorizer": {
+    "name": "TestInvokeAuthorizer",
+    "description": "Grants permission to test invoke the specified custom authorizer for testing purposes",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "authorizer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "TransferCertificate": {
+    "name": "TransferCertificate",
+    "description": "Grants permission to transfer the specified certificate to the specified AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UntagResource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "authorizer",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "billinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cacert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "certificateprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custommetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dimension",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "domainconfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dynamicthinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "fleetmetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "jobtemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "mitigationaction",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "otaupdate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "package",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "packageversion",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "provisioningtemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "rolealias",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "scheduledaudit",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "securityprofile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "stream",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thingtype",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "UpdateAccountAuditConfiguration": {
+    "name": "UpdateAccountAuditConfiguration",
+    "description": "Grants permission to configure or reconfigure the Device Defender audit settings for this account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateAuditSuppression": {
+    "name": "UpdateAuditSuppression",
+    "description": "Grants permission to update a Device Defender audit suppression",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateAuthorizer": {
+    "name": "UpdateAuthorizer",
+    "description": "Grants permission to update an authorizer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "authorizer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateBillingGroup": {
+    "name": "UpdateBillingGroup",
+    "description": "Grants permission to update information associated with the specified billing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "billinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateCACertificate": {
+    "name": "UpdateCACertificate",
+    "description": "Grants permission to update a registered CA certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cacert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
+  "UpdateCertificate": {
+    "name": "UpdateCertificate",
+    "description": "Grants permission to update the status of the specified certificate. This operation is idempotent",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateCertificateProvider": {
+    "name": "UpdateCertificateProvider",
+    "description": "Grants permission to update a certificate provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateprovider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateCustomMetric": {
+    "name": "UpdateCustomMetric",
+    "description": "Grants permission to update the specified custom metric",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "custommetric",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateDimension": {
+    "name": "UpdateDimension",
+    "description": "Grants permission to update the definition for a dimension",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dimension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateDomainConfiguration": {
+    "name": "UpdateDomainConfiguration",
+    "description": "Grants permission to update a domain configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domainconfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateDynamicThingGroup": {
+    "name": "UpdateDynamicThingGroup",
+    "description": "Grants permission to update a Dynamic Thing Group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dynamicthinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateEventConfigurations": {
+    "name": "UpdateEventConfigurations",
+    "description": "Grants permission to update event configurations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateFleetMetric": {
+    "name": "UpdateFleetMetric",
+    "description": "Grants permission to update a fleet metric",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "fleetmetric",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateIndexingConfiguration": {
+    "name": "UpdateIndexingConfiguration",
+    "description": "Grants permission to update fleet indexing configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateJob": {
+    "name": "UpdateJob",
+    "description": "Grants permission to update a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateMitigationAction": {
+    "name": "UpdateMitigationAction",
+    "description": "Grants permission to update the definition for the specified mitigation action",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mitigationaction",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdatePackage": {
+    "name": "UpdatePackage",
+    "description": "Grants permission to update a package",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iot:GetIndexingConfiguration"
+    ]
+  },
+  "UpdatePackageConfiguration": {
+    "name": "UpdatePackageConfiguration",
+    "description": "Grants permission to update the package configuration of the account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
+  "UpdatePackageVersion": {
+    "name": "UpdatePackageVersion",
+    "description": "Grants permission to update the version of the specified package",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iot:GetIndexingConfiguration"
+        ]
+      },
+      {
+        "name": "packageversion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateProvisioningTemplate": {
+    "name": "UpdateProvisioningTemplate",
+    "description": "Grants permission to update a fleet provisioning template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "provisioningtemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
+  "UpdateRoleAlias": {
+    "name": "UpdateRoleAlias",
+    "description": "Grants permission to update the role alias",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rolealias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
+  "UpdateScheduledAudit": {
+    "name": "UpdateScheduledAudit",
+    "description": "Grants permission to update a scheduled audit, including what checks are performed and how often the audit takes place",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scheduledaudit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateSecurityProfile": {
+    "name": "UpdateSecurityProfile",
+    "description": "Grants permission to update a Device Defender security profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "securityprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custommetric",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dimension",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateStream": {
+    "name": "UpdateStream",
+    "description": "Grants permission to update the data for a stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateThing": {
+    "name": "UpdateThing",
+    "description": "Grants permission to update information associated with the specified thing",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateThingGroup": {
+    "name": "UpdateThingGroup",
+    "description": "Grants permission to update information associated with the specified thing group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thinggroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateThingGroupsForThing": {
+    "name": "UpdateThingGroupsForThing",
+    "description": "Grants permission to update the thing groups to which the thing belongs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thinggroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateThingShadow": {
+    "name": "UpdateThingShadow",
+    "description": "Grants permission to update the thing shadow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "UpdateTopicRuleDestination": {
+    "name": "UpdateTopicRuleDestination",
+    "description": "Grants permission to update a TopicRuleDestination",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "destination",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "ValidateSecurityProfileBehaviors": {
+    "name": "ValidateSecurityProfileBehaviors",
+    "description": "Grants permission to validate a Device Defender security profile behaviors specification",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}