@cloud-copilot/iam-data 0.19.202607021 → 0.19.202607151

package/data/actions/workmail.json

@@ -1,7 +1,6 @@
 {
   "allowvendedlogdeliveryforresource": {
     "name": "AllowVendedLogDeliveryForResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to configure vended log delivery for WorkMail audit logs",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -15,9 +14,369 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "associatedelegatetoresource": {
-    "name": "AssociateDelegateToResource",
-    "description": "Grants permission to add a member (user or group) to the resource's set of delegates",
+  "createinboundmailflowrule": {
+    "name": "CreateInboundMailFlowRule",
+    "description": "Grants permission to create an inbound email flow rule which will apply to all email sent to an organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createmaildomain": {
+    "name": "CreateMailDomain",
+    "description": "Grants permission to create a mail domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createoutboundmailflowrule": {
+    "name": "CreateOutboundMailFlowRule",
+    "description": "Grants permission to create an outbound email flow rule which will apply to all email sent from an organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createsmtpgateway": {
+    "name": "CreateSmtpGateway",
+    "description": "Grants permission to register an SMTP gateway to a WorkMail organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteinboundmailflowrule": {
+    "name": "DeleteInboundMailFlowRule",
+    "description": "Grants permission to remove an inbound email flow rule to no longer apply to emails sent to an organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletemaildomain": {
+    "name": "DeleteMailDomain",
+    "description": "Grants permission to remove an unused mail domain from an organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletemobiledevice": {
+    "name": "DeleteMobileDevice",
+    "description": "Grants permission to remove a mobile device from a user",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteoutboundmailflowrule": {
+    "name": "DeleteOutboundMailFlowRule",
+    "description": "Grants permission to remove an outbound email flow rule so that it no longer applies to emails sent from an organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletesmtpgateway": {
+    "name": "DeleteSmtpGateway",
+    "description": "Grants permission to remove an SMTP gateway from an organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "delivertomailbox": {
+    "name": "DeliverToMailbox",
+    "description": "Grants permission to deliver emails to a WorkMail organization via the SES MailManager DeliverToMailbox action",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeinboundmailflowrule": {
+    "name": "DescribeInboundMailFlowRule",
+    "description": "Grants permission to read the details of an inbound mail flow rule configured for an organization",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describemaildomains": {
+    "name": "DescribeMailDomains",
+    "description": "Grants permission to show the details of all mail domains associated with the organization",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeoutboundmailflowrule": {
+    "name": "DescribeOutboundMailFlowRule",
+    "description": "Grants permission to read the details of an outbound mail flow rule configured for an organization",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describesmtpgateway": {
+    "name": "DescribeSmtpGateway",
+    "description": "Grants permission to read the details of an SMTP gateway registered to an organization",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "enablemaildomain": {
+    "name": "EnableMailDomain",
+    "description": "Grants permission to enable a mail domain in the organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getjournalingrules": {
+    "name": "GetJournalingRules",
+    "description": "Grants permission to read the configured journaling and fallback email addresses for email journaling",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmaildomaindetails": {
+    "name": "GetMailDomainDetails",
+    "description": "Grants permission to get the details of the mail domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmobiledevicedetails": {
+    "name": "GetMobileDeviceDetails",
+    "description": "Grants permission to get the details of the mobile device",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmobiledevicesforuser": {
+    "name": "GetMobileDevicesForUser",
+    "description": "Grants permission to get a list of the mobile devices associated with the user",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmobilepolicydetails": {
+    "name": "GetMobilePolicyDetails",
+    "description": "Grants permission to get the details of the mobile device policy associated with the organization",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinboundmailflowrules": {
+    "name": "ListInboundMailFlowRules",
+    "description": "Grants permission to list inbound mail flow rules configured for an organization",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listoutboundmailflowrules": {
+    "name": "ListOutboundMailFlowRules",
+    "description": "Grants permission to list outbound mail flow rules configured for an organization",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsmtpgateways": {
+    "name": "ListSmtpGateways",
+    "description": "Grants permission to list SMTP gateways registered to the organization",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchmembers": {
+    "name": "SearchMembers",
+    "description": "Grants permission to perform a prefix search to find a specific user in a mail group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "setdefaultmaildomain": {
+    "name": "SetDefaultMailDomain",
+    "description": "Grants permission to set the default mail domain for the organization",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -30,9 +389,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "associatemembertogroup": {
-    "name": "AssociateMemberToGroup",
-    "description": "Grants permission to add a member (user or group) to the group's set",
+  "setjournalingrules": {
+    "name": "SetJournalingRules",
+    "description": "Grants permission to set journaling and fallback email addresses for email journaling",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -45,9 +404,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "assumeimpersonationrole": {
-    "name": "AssumeImpersonationRole",
-    "description": "Grants permission to assume an impersonation role for the given Amazon WorkMail organization",
+  "setmobilepolicydetails": {
+    "name": "SetMobilePolicyDetails",
+    "description": "Grants permission to set the details of a mobile policy associated with the organization",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -57,14 +416,27 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "workmail:ImpersonationRoleId"
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "testinboundmailflowrules": {
+    "name": "TestInboundMailFlowRules",
+    "description": "Grants permission to test what inbound rules will apply to an email with a given sender and recipient",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
     ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "cancelmailboxexportjob": {
-    "name": "CancelMailboxExportJob",
-    "description": "Grants permission to cancel a currently running mailbox export job",
+  "testoutboundmailflowrules": {
+    "name": "TestOutboundMailFlowRules",
+    "description": "Grants permission to test what outbound rules will apply to an email with a given sender and recipient",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -77,9 +449,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createalias": {
-    "name": "CreateAlias",
-    "description": "Grants permission to add an alias to the set of a given member (user or group) of WorkMail",
+  "updateinboundmailflowrule": {
+    "name": "UpdateInboundMailFlowRule",
+    "description": "Grants permission to update the details of an inbound email flow rule which will apply to all email sent to an organization",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -92,9 +464,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createavailabilityconfiguration": {
-    "name": "CreateAvailabilityConfiguration",
-    "description": "Grants permission to create an AvailabilityConfiguration for the given Amazon WorkMail organization and domain",
+  "updateoutboundmailflowrule": {
+    "name": "UpdateOutboundMailFlowRule",
+    "description": "Grants permission to update the details of an outbound email flow rule which will apply to all email sent from an organization",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -107,9 +479,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "creategroup": {
-    "name": "CreateGroup",
-    "description": "Grants permission to create a group that can be used in WorkMail by calling the RegisterToWorkMail operation",
+  "updatesmtpgateway": {
+    "name": "UpdateSmtpGateway",
+    "description": "Grants permission to update the details of an existing SMTP gateway registered to an organization",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -122,17 +494,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createidentitycenterapplication": {
-    "name": "CreateIdentityCenterApplication",
-    "description": "Grants permission to create an Identity Center application for WorkMail",
+  "wipemobiledevice": {
+    "name": "WipeMobileDevice",
+    "description": "Grants permission to remotely wipe the mobile device associated with a user's account",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createimpersonationrole": {
-    "name": "CreateImpersonationRole",
-    "description": "Grants permission to create an impersonation role for the given Amazon WorkMail organization",
+  "associatedelegatetoresource": {
+    "name": "AssociateDelegateToResource",
+    "description": "Grants permission to add a member (user or group) to the resource's set of delegates",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -145,10 +524,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createinboundmailflowrule": {
-    "name": "CreateInboundMailFlowRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an inbound email flow rule which will apply to all email sent to an organization",
+  "associatemembertogroup": {
+    "name": "AssociateMemberToGroup",
+    "description": "Grants permission to add a member (user or group) to the group's set",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -161,10 +539,26 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createmaildomain": {
-    "name": "CreateMailDomain",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a mail domain",
+  "assumeimpersonationrole": {
+    "name": "AssumeImpersonationRole",
+    "description": "Grants permission to assume an impersonation role for the given Amazon WorkMail organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "workmail:ImpersonationRoleId"
+    ],
+    "dependentActions": []
+  },
+  "cancelmailboxexportjob": {
+    "name": "CancelMailboxExportJob",
+    "description": "Grants permission to cancel a currently running mailbox export job",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -177,9 +571,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createmobiledeviceaccessrule": {
-    "name": "CreateMobileDeviceAccessRule",
-    "description": "Grants permission to create a new mobile device access rule",
+  "createalias": {
+    "name": "CreateAlias",
+    "description": "Grants permission to add an alias to the set of a given member (user or group) of WorkMail",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -192,18 +586,47 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createorganization": {
-    "name": "CreateOrganization",
-    "description": "Grants permission to create a new Amazon WorkMail organization",
+  "createavailabilityconfiguration": {
+    "name": "CreateAvailabilityConfiguration",
+    "description": "Grants permission to create an AvailabilityConfiguration for the given Amazon WorkMail organization and domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "creategroup": {
+    "name": "CreateGroup",
+    "description": "Grants permission to create a group that can be used in WorkMail by calling the RegisterToWorkMail operation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createidentitycenterapplication": {
+    "name": "CreateIdentityCenterApplication",
+    "description": "Grants permission to create an Identity Center application for WorkMail",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createoutboundmailflowrule": {
-    "name": "CreateOutboundMailFlowRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an outbound email flow rule which will apply to all email sent from an organization",
+  "createimpersonationrole": {
+    "name": "CreateImpersonationRole",
+    "description": "Grants permission to create an impersonation role for the given Amazon WorkMail organization",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -216,9 +639,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createresource": {
-    "name": "CreateResource",
-    "description": "Grants permission to create a new WorkMail resource",
+  "createmobiledeviceaccessrule": {
+    "name": "CreateMobileDeviceAccessRule",
+    "description": "Grants permission to create a new mobile device access rule",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -231,10 +654,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createsmtpgateway": {
-    "name": "CreateSmtpGateway",
-    "isPermissionOnly": true,
-    "description": "Grants permission to register an SMTP gateway to a WorkMail organization",
+  "createorganization": {
+    "name": "CreateOrganization",
+    "description": "Grants permission to create a new Amazon WorkMail organization",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createresource": {
+    "name": "CreateResource",
+    "description": "Grants permission to create a new WorkMail resource",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -375,38 +805,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteinboundmailflowrule": {
-    "name": "DeleteInboundMailFlowRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to remove an inbound email flow rule to no longer apply to emails sent to an organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "deletemaildomain": {
-    "name": "DeleteMailDomain",
-    "isPermissionOnly": true,
-    "description": "Grants permission to remove an unused mail domain from an organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletemailboxpermissions": {
     "name": "DeleteMailboxPermissions",
     "description": "Grants permission to delete permissions granted to a member (user or group)",
@@ -422,22 +820,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletemobiledevice": {
-    "name": "DeleteMobileDevice",
-    "isPermissionOnly": true,
-    "description": "Grants permission to remove a mobile device from a user",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletemobiledeviceaccessoverride": {
     "name": "DeleteMobileDeviceAccessOverride",
     "description": "Grants permission to delete a mobile device access override",
@@ -483,22 +865,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteoutboundmailflowrule": {
-    "name": "DeleteOutboundMailFlowRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to remove an outbound email flow rule so that it no longer applies to emails sent from an organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletepersonalaccesstoken": {
     "name": "DeletePersonalAccessToken",
     "description": "Grants permission to delete a personal access token",
@@ -544,22 +910,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletesmtpgateway": {
-    "name": "DeleteSmtpGateway",
-    "isPermissionOnly": true,
-    "description": "Grants permission to remove an SMTP gateway from an organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteuser": {
     "name": "DeleteUser",
     "description": "Grants permission to delete a user from WorkMail and all subsequent systems",
@@ -575,22 +925,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "delivertomailbox": {
-    "name": "DeliverToMailbox",
-    "isPermissionOnly": true,
-    "description": "Grants permission to deliver emails to a WorkMail organization via the SES MailManager DeliverToMailbox action",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deregisterfromworkmail": {
     "name": "DeregisterFromWorkMail",
     "description": "Grants permission to mark a user, group, or resource as no longer used in WorkMail",
@@ -696,38 +1030,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeinboundmailflowrule": {
-    "name": "DescribeInboundMailFlowRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read the details of an inbound mail flow rule configured for an organization",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describemaildomains": {
-    "name": "DescribeMailDomains",
-    "isPermissionOnly": true,
-    "description": "Grants permission to show the details of all mail domains associated with the organization",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describemailboxexportjob": {
     "name": "DescribeMailboxExportJob",
     "description": "Grants permission to retrieve details of a mailbox export job",
@@ -758,22 +1060,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeoutboundmailflowrule": {
-    "name": "DescribeOutboundMailFlowRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read the details of an outbound mail flow rule configured for an organization",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeresource": {
     "name": "DescribeResource",
     "description": "Grants permission to read the details for a resource",
@@ -789,22 +1075,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describesmtpgateway": {
-    "name": "DescribeSmtpGateway",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read the details of an SMTP gateway registered to an organization",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeuser": {
     "name": "DescribeUser",
     "description": "Grants permission to read details for a user",
@@ -821,100 +1091,9 @@
     "dependentActions": []
   },
   "disassociatedelegatefromresource": {
-    "name": "DisassociateDelegateFromResource",
-    "description": "Grants permission to remove a member from the resource's set of delegates",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "disassociatememberfromgroup": {
-    "name": "DisassociateMemberFromGroup",
-    "description": "Grants permission to remove a member from a group",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "enablemaildomain": {
-    "name": "EnableMailDomain",
-    "isPermissionOnly": true,
-    "description": "Grants permission to enable a mail domain in the organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getaccesscontroleffect": {
-    "name": "GetAccessControlEffect",
-    "description": "Grants permission to get the effects of access control rules as they apply to a specified IPv4 address, access protocol action, or user ID",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getdefaultretentionpolicy": {
-    "name": "GetDefaultRetentionPolicy",
-    "description": "Grants permission to retrieve the retention policy associated at an organizational level",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getimpersonationrole": {
-    "name": "GetImpersonationRole",
-    "description": "Grants permission to retrieve an impersonation role for the given Amazon WorkMail organization",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getimpersonationroleeffect": {
-    "name": "GetImpersonationRoleEffect",
-    "description": "Grants permission to get the effect of the rules associated to an impersonation role for a specific user",
-    "accessLevel": "Read",
+    "name": "DisassociateDelegateFromResource",
+    "description": "Grants permission to remove a member from the resource's set of delegates",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "organization",
@@ -926,11 +1105,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getjournalingrules": {
-    "name": "GetJournalingRules",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read the configured journaling and fallback email addresses for email journaling",
-    "accessLevel": "Read",
+  "disassociatememberfromgroup": {
+    "name": "DisassociateMemberFromGroup",
+    "description": "Grants permission to remove a member from a group",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "organization",
@@ -942,9 +1120,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmaildomain": {
-    "name": "GetMailDomain",
-    "description": "Grants permission to retrieve details of a given mail domain in an organization",
+  "getaccesscontroleffect": {
+    "name": "GetAccessControlEffect",
+    "description": "Grants permission to get the effects of access control rules as they apply to a specified IPv4 address, access protocol action, or user ID",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -957,10 +1135,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmaildomaindetails": {
-    "name": "GetMailDomainDetails",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the details of the mail domain",
+  "getdefaultretentionpolicy": {
+    "name": "GetDefaultRetentionPolicy",
+    "description": "Grants permission to retrieve the retention policy associated at an organizational level",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -973,9 +1150,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmailboxdetails": {
-    "name": "GetMailboxDetails",
-    "description": "Grants permission to read the details of the user's mailbox",
+  "getimpersonationrole": {
+    "name": "GetImpersonationRole",
+    "description": "Grants permission to retrieve an impersonation role for the given Amazon WorkMail organization",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -988,9 +1165,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmobiledeviceaccesseffect": {
-    "name": "GetMobileDeviceAccessEffect",
-    "description": "Grants permission to simulate the effect of the mobile device access rules for the given attributes of a sample access event",
+  "getimpersonationroleeffect": {
+    "name": "GetImpersonationRoleEffect",
+    "description": "Grants permission to get the effect of the rules associated to an impersonation role for a specific user",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -1003,9 +1180,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmobiledeviceaccessoverride": {
-    "name": "GetMobileDeviceAccessOverride",
-    "description": "Grants permission to retrieve a mobile device access override",
+  "getmaildomain": {
+    "name": "GetMailDomain",
+    "description": "Grants permission to retrieve details of a given mail domain in an organization",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -1018,10 +1195,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmobiledevicedetails": {
-    "name": "GetMobileDeviceDetails",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the details of the mobile device",
+  "getmailboxdetails": {
+    "name": "GetMailboxDetails",
+    "description": "Grants permission to read the details of the user's mailbox",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -1034,10 +1210,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmobiledevicesforuser": {
-    "name": "GetMobileDevicesForUser",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get a list of the mobile devices associated with the user",
+  "getmobiledeviceaccesseffect": {
+    "name": "GetMobileDeviceAccessEffect",
+    "description": "Grants permission to simulate the effect of the mobile device access rules for the given attributes of a sample access event",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -1050,10 +1225,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmobilepolicydetails": {
-    "name": "GetMobilePolicyDetails",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the details of the mobile device policy associated with the organization",
+  "getmobiledeviceaccessoverride": {
+    "name": "GetMobileDeviceAccessOverride",
+    "description": "Grants permission to retrieve a mobile device access override",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -1186,22 +1360,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listinboundmailflowrules": {
-    "name": "ListInboundMailFlowRules",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list inbound mail flow rules configured for an organization",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listmaildomains": {
     "name": "ListMailDomains",
     "description": "Grants permission to list the mail domains for a given organization",
@@ -1285,22 +1443,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listoutboundmailflowrules": {
-    "name": "ListOutboundMailFlowRules",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list outbound mail flow rules configured for an organization",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listpersonalaccesstokens": {
     "name": "ListPersonalAccessTokens",
     "description": "Grants permission to list metadata for personal access tokens",
@@ -1346,22 +1488,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listsmtpgateways": {
-    "name": "ListSmtpGateways",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list SMTP gateways registered to the organization",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags applied to an Amazon WorkMail organization resource",
@@ -1375,8 +1501,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -1545,70 +1671,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "searchmembers": {
-    "name": "SearchMembers",
-    "isPermissionOnly": true,
-    "description": "Grants permission to perform a prefix search to find a specific user in a mail group",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "setdefaultmaildomain": {
-    "name": "SetDefaultMailDomain",
-    "isPermissionOnly": true,
-    "description": "Grants permission to set the default mail domain for the organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "setjournalingrules": {
-    "name": "SetJournalingRules",
-    "isPermissionOnly": true,
-    "description": "Grants permission to set journaling and fallback email addresses for email journaling",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "setmobilepolicydetails": {
-    "name": "SetMobilePolicyDetails",
-    "isPermissionOnly": true,
-    "description": "Grants permission to set the details of a mobile policy associated with the organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "startmailboxexportjob": {
     "name": "StartMailboxExportJob",
     "description": "Grants permission to start a new mailbox export job",
@@ -1627,7 +1689,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag the specified Amazon WorkMail organization resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "organization",
@@ -1637,8 +1699,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -1657,42 +1719,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "testinboundmailflowrules": {
-    "name": "TestInboundMailFlowRules",
-    "isPermissionOnly": true,
-    "description": "Grants permission to test what inbound rules will apply to an email with a given sender and recipient",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "testoutboundmailflowrules": {
-    "name": "TestOutboundMailFlowRules",
-    "isPermissionOnly": true,
-    "description": "Grants permission to test what outbound rules will apply to an email with a given sender and recipient",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag the specified Amazon WorkMail organization resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "organization",
@@ -1766,22 +1796,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateinboundmailflowrule": {
-    "name": "UpdateInboundMailFlowRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update the details of an inbound email flow rule which will apply to all email sent to an organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatemailboxquota": {
     "name": "UpdateMailboxQuota",
     "description": "Grants permission to update the maximum size (in MB) of the user's mailbox",
@@ -1812,22 +1826,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateoutboundmailflowrule": {
-    "name": "UpdateOutboundMailFlowRule",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update the details of an outbound email flow rule which will apply to all email sent from an organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updateprimaryemailaddress": {
     "name": "UpdatePrimaryEmailAddress",
     "description": "Grants permission to update the primary email for a user, group, or resource",
@@ -1858,22 +1856,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updatesmtpgateway": {
-    "name": "UpdateSmtpGateway",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update the details of an existing SMTP gateway registered to an organization",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updateuser": {
     "name": "UpdateUser",
     "description": "Grants permission to update details of a user",
@@ -1888,21 +1870,5 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
-  },
-  "wipemobiledevice": {
-    "name": "WipeMobileDevice",
-    "isPermissionOnly": true,
-    "description": "Grants permission to remotely wipe the mobile device associated with a user's account",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "organization",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
   }
 }