@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/quicksight.json

@@ -1,7 +1,6 @@
 {
   "accountconfigurations": {
     "name": "AccountConfigurations",
-    "isPermissionOnly": true,
     "description": "Grants permission to enable setting default access to AWS resources",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -10,9 +9,436 @@
   },
   "allowvendedlogdeliveryforresource": {
     "name": "AllowVendedLogDeliveryForResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to configure log delivery for QuickSuite instance",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchgetpreferences": {
+    "name": "BatchGetPreferences",
+    "description": "Grants permission to get user preferences",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchupdatepreferences": {
+    "name": "BatchUpdatePreferences",
+    "description": "Grants permission to update user preferences",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createadmin": {
+    "name": "CreateAdmin",
+    "description": "Grants permission to provision Amazon QuickSight administrators, authors, and readers",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createemailcustomizationtemplate": {
+    "name": "CreateEmailCustomizationTemplate",
+    "description": "Grants permission to create a QuickSight email customization template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "emailCustomizationTemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createextensionaccess": {
+    "name": "CreateExtensionAccess",
+    "description": "Grants permission to create an extension access",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "extensionaccess",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createreader": {
+    "name": "CreateReader",
+    "description": "Grants permission to provision Amazon QuickSight readers",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createuser": {
+    "name": "CreateUser",
+    "description": "Grants permission to provision Amazon QuickSight authors and readers",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteemailcustomizationtemplate": {
+    "name": "DeleteEmailCustomizationTemplate",
+    "description": "Grants permission to delete a QuickSight email customization template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "emailCustomizationTemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteextensionaccess": {
+    "name": "DeleteExtensionAccess",
+    "description": "Grants permission to delete an extension access",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "extensionaccess",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describechatconfiguration": {
+    "name": "DescribeChatConfiguration",
+    "description": "Grants permission to describe chat configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeemailcustomizationtemplate": {
+    "name": "DescribeEmailCustomizationTemplate",
+    "description": "Grants permission to describe a QuickSight email customization template",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "emailCustomizationTemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeextensionaccess": {
+    "name": "DescribeExtensionAccess",
+    "description": "Grants permission to describe an extension access",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "extensionaccess",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describequickindexcapacity": {
+    "name": "DescribeQuickIndexCapacity",
+    "description": "Grants permission to describe index capacity",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getanonymoususerembedurl": {
+    "name": "GetAnonymousUserEmbedUrl",
+    "description": "Grants permission to get a URL used to embed a QuickSight Dashboard for a user not registered with QuickSight",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getauthcode": {
+    "name": "GetAuthCode",
+    "description": "Grants permission to get an auth code representing a QuickSight user",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcustompermissionssummary": {
+    "name": "GetCustomPermissionsSummary",
+    "description": "Grants permission to get information about the custom permissions in an account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getgroupmapping": {
+    "name": "GetGroupMapping",
+    "description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to identify and display the Microsoft Active Directory (Microsoft Active Directory) directory groups that are mapped to roles in Amazon QuickSight",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcustomermanagedkeys": {
+    "name": "ListCustomerManagedKeys",
+    "description": "Grants permission to list all registered customer managed keys",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listextensionaccesses": {
+    "name": "ListExtensionAccesses",
+    "description": "Grants permission to list extension accesses",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listkmskeysforuser": {
+    "name": "ListKMSKeysForUser",
+    "description": "Grants permission to list a user's KMS keys",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listusersindexcapacity": {
+    "name": "ListUsersIndexCapacity",
+    "description": "Grants permission to list users index capacity",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "passdataset": {
+    "name": "PassDataSet",
+    "description": "Grants permission to use a dataset for a template",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "passdatasource": {
+    "name": "PassDataSource",
+    "description": "Grants permission to use a data source for a data set",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "quicksuiteusagemetrics": {
+    "name": "QuickSuiteUsageMetrics",
+    "description": "Grants permission to get QuickSuite usage metrics",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "registercustomermanagedkey": {
+    "name": "RegisterCustomerManagedKey",
+    "description": "Grants permission to register a customer managed key",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "removecustomermanagedkey": {
+    "name": "RemoveCustomerManagedKey",
+    "description": "Grants permission to remove a customer managed key",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "scopedownpolicy": {
+    "name": "ScopeDownPolicy",
+    "description": "Grants permission to manage scoping policies for permissions to AWS resources",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchdirectorygroups": {
+    "name": "SearchDirectoryGroups",
+    "description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchusers": {
+    "name": "SearchUsers",
+    "description": "Grants permission to search the QuickSight users belonging to this account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "setgroupmapping": {
+    "name": "SetGroupMapping",
+    "description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "subscribe": {
+    "name": "Subscribe",
+    "description": "Grants permission to subscribe to Amazon QuickSight, and also to allow the user to upgrade the subscription to Enterprise edition",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "quicksight:DirectoryType",
+      "quicksight:Edition"
+    ],
+    "dependentActions": []
+  },
+  "unpublishflow": {
+    "name": "UnpublishFlow",
+    "description": "Grants permission to unpublish a flow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "unsubscribe": {
+    "name": "Unsubscribe",
+    "description": "Grants permission to unsubscribe from Amazon QuickSight, which permanently deletes all users and their resources from Amazon QuickSight",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatechatconfiguration": {
+    "name": "UpdateChatConfiguration",
+    "description": "Grants permission to update chat configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateemailcustomizationtemplate": {
+    "name": "UpdateEmailCustomizationTemplate",
+    "description": "Grants permission to update a QuickSight email customization template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "emailCustomizationTemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateextensionaccess": {
+    "name": "UpdateExtensionAccess",
+    "description": "Grants permission to update an extension access",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "extensionaccess",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatequickindexcapacity": {
+    "name": "UpdateQuickIndexCapacity",
+    "description": "Grants permission to update index capacity",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateresourcepermissions": {
+    "name": "UpdateResourcePermissions",
+    "description": "Grants permission to update resource-level permissions in QuickSight",
+    "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -83,15 +509,6 @@
     ],
     "dependentActions": []
   },
-  "batchgetpreferences": {
-    "name": "BatchGetPreferences",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get user preferences",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "batchunassignlimitsprofile": {
     "name": "BatchUnassignLimitsProfile",
     "description": "Grants permission to unassign a limits profile from targets",
@@ -107,15 +524,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchupdatepreferences": {
-    "name": "BatchUpdatePreferences",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update user preferences",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "cancelingestion": {
     "name": "CancelIngestion",
     "description": "Grants permission to cancel a SPICE ingestions on a dataset",
@@ -151,43 +559,27 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "quicksight:Edition",
-      "quicksight:DirectoryType"
+      "quicksight:DirectoryType",
+      "quicksight:Edition"
     ],
     "dependentActions": []
   },
   "createactionconnector": {
     "name": "CreateActionConnector",
-    "description": "Grants permission to create an action connector",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "actionconnector",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
-  "createadmin": {
-    "name": "CreateAdmin",
-    "isPermissionOnly": true,
-    "description": "Grants permission to provision Amazon QuickSight administrators, authors, and readers",
+    "description": "Grants permission to create an action connector",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "user",
+        "name": "actionconnector",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createagent": {
@@ -286,9 +678,7 @@
         "name": "datasource",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "quicksight:PassDataSource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -306,43 +696,6 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
-  },
-  "createemailcustomizationtemplate": {
-    "name": "CreateEmailCustomizationTemplate",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a QuickSight email customization template",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "emailCustomizationTemplate",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
-  "createextensionaccess": {
-    "name": "CreateExtensionAccess",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an extension access",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "extensionaccess",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "createflow": {
@@ -383,12 +736,6 @@
     "description": "Grants permission to add a QuickSight Dashboard, Analysis or Dataset to a QuickSight Folder",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "folder",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "analysis",
         "required": false,
@@ -406,6 +753,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "folder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -441,8 +794,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -479,6 +832,30 @@
     ],
     "dependentActions": []
   },
+  "createknowledgebase": {
+    "name": "CreateKnowledgeBase",
+    "description": "Grants permission to create a knowledge base",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "knowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createlimitsprofile": {
     "name": "CreateLimitsProfile",
     "description": "Grants permission to create a limits profile",
@@ -506,9 +883,7 @@
         "name": "namespace",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ds:CreateIdentityPoolDirectory"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -528,22 +903,6 @@
     ],
     "dependentActions": []
   },
-  "createreader": {
-    "name": "CreateReader",
-    "isPermissionOnly": true,
-    "description": "Grants permission to provision Amazon QuickSight readers",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "user",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createrefreshschedule": {
     "name": "CreateRefreshSchedule",
     "description": "Grants permission to create a refresh schedule for a dataset",
@@ -665,9 +1024,7 @@
         "name": "dataset",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "quicksight:PassDataSet"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -691,22 +1048,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createuser": {
-    "name": "CreateUser",
-    "isPermissionOnly": true,
-    "description": "Grants permission to provision Amazon QuickSight authors and readers",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "user",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createvpcconnection": {
     "name": "CreateVPCConnection",
     "description": "Grants permission to create a vpc connection",
@@ -716,9 +1057,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "deleteaccountcustompermission": {
     "name": "DeleteAccountCustomPermission",
@@ -908,38 +1247,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteemailcustomizationtemplate": {
-    "name": "DeleteEmailCustomizationTemplate",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete a QuickSight email customization template",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "emailCustomizationTemplate",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "deleteextensionaccess": {
-    "name": "DeleteExtensionAccess",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete an extension access",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "extensionaccess",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteflow": {
     "name": "DeleteFlow",
     "description": "Grants permission to delete a flow",
@@ -975,12 +1282,6 @@
     "description": "Grants permission to remove a QuickSight Dashboard, Analysis or Dataset from a QuickSight Folder",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "folder",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "analysis",
         "required": false,
@@ -998,6 +1299,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "folder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1026,13 +1333,13 @@
       {
         "name": "group",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "quicksight:UserName"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "quicksight:UserName"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "deleteiampolicyassignment": {
@@ -1101,9 +1408,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ds:DeleteDirectory"
-    ]
+    "dependentActions": []
   },
   "deleteoauthclientapplication": {
     "name": "DeleteOAuthClientApplication",
@@ -1511,7 +1816,7 @@
   "describeautomationgrouppermissions": {
     "name": "DescribeAutomationGroupPermissions",
     "description": "Grants permission to describe permissions for an automation group",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "automationGroup",
@@ -1576,15 +1881,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describechatconfiguration": {
-    "name": "DescribeChatConfiguration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe chat configuration",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describecustompermissions": {
     "name": "DescribeCustomPermissions",
     "description": "Grants permission to describe a custom permissions resource in a QuickSight account",
@@ -1689,7 +1985,7 @@
   "describedatasetpermissions": {
     "name": "DescribeDataSetPermissions",
     "description": "Grants permission to describe the resource policy of a dataset",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "dataset",
@@ -1740,7 +2036,7 @@
   "describedatasourcepermissions": {
     "name": "DescribeDataSourcePermissions",
     "description": "Grants permission to describe the resource policy of a data source",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "datasource",
@@ -1763,38 +2059,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeemailcustomizationtemplate": {
-    "name": "DescribeEmailCustomizationTemplate",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe a QuickSight email customization template",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "emailCustomizationTemplate",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describeextensionaccess": {
-    "name": "DescribeExtensionAccess",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe an extension access",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "extensionaccess",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeflow": {
     "name": "DescribeFlow",
     "description": "Grants permission to describe a flow",
@@ -1878,13 +2142,13 @@
       {
         "name": "group",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "quicksight:UserName"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "quicksight:UserName"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "describeiampolicyassignment": {
@@ -1954,7 +2218,7 @@
   "describeknowledgebasepermissions": {
     "name": "DescribeKnowledgeBasePermissions",
     "description": "Grants permission to describe the resource policy of a knowledge base",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "knowledgeBase",
@@ -2022,15 +2286,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describequickindexcapacity": {
-    "name": "DescribeQuickIndexCapacity",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe index capacity",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describequicksightqsearchconfiguration": {
     "name": "DescribeQuickSightQSearchConfiguration",
     "description": "Grants permission to describe QuickSight Q Search configuration",
@@ -2088,7 +2343,7 @@
   "describespacepermissions": {
     "name": "DescribeSpacePermissions",
     "description": "Grants permission to describe permissions for a space",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "space",
@@ -2211,7 +2466,7 @@
   "describetopicpermissions": {
     "name": "DescribeTopicPermissions",
     "description": "Grants permission to describe the resource policy of a topic",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "topic",
@@ -2298,14 +2553,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "namespace",
-        "required": true,
+        "name": "dashboard",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "dashboard",
-        "required": false,
+        "name": "namespace",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
@@ -2347,45 +2602,11 @@
   "generateembedurlforregistereduserwithidentity": {
     "name": "GenerateEmbedUrlForRegisteredUserWithIdentity",
     "description": "Grants permission to generate a URL used to embed a QuickSight Experience for a user registered with QuickSight using Identity-enhanced role session",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "quicksight:AllowedEmbeddingDomains"
-    ],
-    "dependentActions": []
-  },
-  "getanonymoususerembedurl": {
-    "name": "GetAnonymousUserEmbedUrl",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get a URL used to embed a QuickSight Dashboard for a user not registered with QuickSight",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getauthcode": {
-    "name": "GetAuthCode",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get an auth code representing a QuickSight user",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "user",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getcustompermissionssummary": {
-    "name": "GetCustomPermissionsSummary",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get information about the custom permissions in an account",
-    "accessLevel": "Read",
+    "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "quicksight:AllowedEmbeddingDomains"
+    ],
     "dependentActions": []
   },
   "getdashboardembedurl": {
@@ -2433,15 +2654,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getgroupmapping": {
-    "name": "GetGroupMapping",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to identify and display the Microsoft Active Directory (Microsoft Active Directory) directory groups that are mapped to roles in Amazon QuickSight",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getidentitycontext": {
     "name": "GetIdentityContext",
     "description": "Grants permission to get identity context for a user",
@@ -2572,15 +2784,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listcustomermanagedkeys": {
-    "name": "ListCustomerManagedKeys",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list all registered customer managed keys",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listdashboardversions": {
     "name": "ListDashboardVersions",
     "description": "Grants permission to list all versions of a QuickSight Dashboard",
@@ -2633,15 +2836,6 @@
     ],
     "dependentActions": []
   },
-  "listextensionaccesses": {
-    "name": "ListExtensionAccesses",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list extension accesses",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listflows": {
     "name": "ListFlows",
     "description": "Grants permission to list all flows in an Amazon QuickSight account",
@@ -2798,15 +2992,6 @@
     ],
     "dependentActions": []
   },
-  "listkmskeysforuser": {
-    "name": "ListKMSKeysForUser",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list a user's KMS keys",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listknowledgebases": {
     "name": "ListKnowledgeBases",
     "description": "Grants permission to list all knowledge bases in an account",
@@ -3185,15 +3370,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listusersindexcapacity": {
-    "name": "ListUsersIndexCapacity",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list users index capacity",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listvpcconnections": {
     "name": "ListVPCConnections",
     "description": "Grants permission to list all vpc connections",
@@ -3205,44 +3381,6 @@
     ],
     "dependentActions": []
   },
-  "passdataset": {
-    "name": "PassDataSet",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use a dataset for a template",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "dataset",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
-  "passdatasource": {
-    "name": "PassDataSource",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use a data source for a data set",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "datasource",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
   "predictqaresults": {
     "name": "PredictQAResults",
     "description": "Grants permission to predict QA results",
@@ -3279,24 +3417,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "quicksuiteusagemetrics": {
-    "name": "QuickSuiteUsageMetrics",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get QuickSuite usage metrics",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "registercustomermanagedkey": {
-    "name": "RegisterCustomerManagedKey",
-    "isPermissionOnly": true,
-    "description": "Grants permission to register a customer managed key",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "registeruser": {
     "name": "RegisterUser",
     "description": "Grants permission to create a QuickSight user, whose identity is associated with the IAM identity/role specified in the request",
@@ -3318,15 +3438,6 @@
     ],
     "dependentActions": []
   },
-  "removecustomermanagedkey": {
-    "name": "RemoveCustomerManagedKey",
-    "isPermissionOnly": true,
-    "description": "Grants permission to remove a customer managed key",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "restoreanalysis": {
     "name": "RestoreAnalysis",
     "description": "Grants permission to restore a deleted analysis",
@@ -3342,15 +3453,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "scopedownpolicy": {
-    "name": "ScopeDownPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to manage scoping policies for permissions to AWS resources",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "searchactionconnectors": {
     "name": "SearchActionConnectors",
     "description": "Grants permission to search action connectors",
@@ -3449,15 +3551,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "searchdirectorygroups": {
-    "name": "SearchDirectoryGroups",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "searchflows": {
     "name": "SearchFlows",
     "description": "Grants permission to search flows in an Amazon QuickSight account",
@@ -3534,31 +3627,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "searchusers": {
-    "name": "SearchUsers",
-    "isPermissionOnly": true,
-    "description": "Grants permission to search the QuickSight users belonging to this account",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "user",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "setgroupmapping": {
-    "name": "SetGroupMapping",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to display your Microsoft Active Directory directory groups so that you can choose which ones to map to roles in Amazon QuickSight",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "startassetbundleexportjob": {
     "name": "StartAssetBundleExportJob",
     "description": "Grants permission to start an asset bundle export job",
@@ -3627,22 +3695,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "subscribe": {
-    "name": "Subscribe",
-    "isPermissionOnly": true,
-    "description": "Grants permission to subscribe to Amazon QuickSight, and also to allow the user to upgrade the subscription to Enterprise edition",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "quicksight:Edition",
-      "quicksight:DirectoryType"
-    ],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a QuickSight resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "actionconnector",
@@ -3760,40 +3816,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
-    "dependentActions": []
-  },
-  "unpublishflow": {
-    "name": "UnpublishFlow",
-    "isPermissionOnly": true,
-    "description": "Grants permission to unpublish a flow",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "flow",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "unsubscribe": {
-    "name": "Unsubscribe",
-    "isPermissionOnly": true,
-    "description": "Grants permission to unsubscribe from Amazon QuickSight, which permanently deletes all users and their resources from Amazon QuickSight",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a QuickSight resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "actionconnector",
@@ -3964,7 +3995,7 @@
   "updateactionconnectorpermissions": {
     "name": "UpdateActionConnectorPermissions",
     "description": "Grants permission to update permissions for an action connector",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "actionconnector",
@@ -3994,7 +4025,7 @@
   "updateagentpermissions": {
     "name": "UpdateAgentPermissions",
     "description": "Grants permission to update agent permissions",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "agent",
@@ -4024,7 +4055,7 @@
   "updateanalysispermissions": {
     "name": "UpdateAnalysisPermissions",
     "description": "Grants permission to update permissions for an analysis",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "analysis",
@@ -4047,7 +4078,7 @@
   "updateautomationgrouppermissions": {
     "name": "UpdateAutomationGroupPermissions",
     "description": "Grants permission to update permissions for an automation group",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "automationGroup",
@@ -4097,15 +4128,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updatechatconfiguration": {
-    "name": "UpdateChatConfiguration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update chat configuration",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatecustompermissions": {
     "name": "UpdateCustomPermissions",
     "description": "Grants permission to update a QuickSight custom permissions resource",
@@ -4154,7 +4176,7 @@
   "updatedashboardpermissions": {
     "name": "UpdateDashboardPermissions",
     "description": "Grants permission to update permissions for a QuickSight Dashboard",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "dashboard",
@@ -4198,9 +4220,7 @@
         "name": "dataset",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "quicksight:PassDataSource"
-        ]
+        "dependentActions": []
       },
       {
         "name": "datasource",
@@ -4218,7 +4238,7 @@
   "updatedatasetpermissions": {
     "name": "UpdateDataSetPermissions",
     "description": "Grants permission to update the resource policy of a dataset",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "dataset",
@@ -4242,9 +4262,7 @@
         "name": "datasource",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -4256,7 +4274,7 @@
   "updatedatasourcepermissions": {
     "name": "UpdateDataSourcePermissions",
     "description": "Grants permission to update the resource policy of a data source",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "datasource",
@@ -4279,38 +4297,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateemailcustomizationtemplate": {
-    "name": "UpdateEmailCustomizationTemplate",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update a QuickSight email customization template",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "emailCustomizationTemplate",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updateextensionaccess": {
-    "name": "UpdateExtensionAccess",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update an extension access",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "extensionaccess",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updateflow": {
     "name": "UpdateFlow",
     "description": "Grants permission to update a flow",
@@ -4329,7 +4315,7 @@
   "updateflowpermissions": {
     "name": "UpdateFlowPermissions",
     "description": "Grants permission to update permissions for a flow",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "flow",
@@ -4359,7 +4345,7 @@
   "updatefolderpermissions": {
     "name": "UpdateFolderPermissions",
     "description": "Grants permission to update permissions for a QuickSight Folder",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "folder",
@@ -4425,10 +4411,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateknowledgebase": {
+    "name": "UpdateKnowledgeBase",
+    "description": "Grants permission to update a knowledge base",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "knowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateknowledgebasepermissions": {
     "name": "UpdateKnowledgeBasePermissions",
     "description": "Grants permission to update the resource policy of a knowledge base",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "knowledgeBase",
@@ -4489,15 +4490,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updatequickindexcapacity": {
-    "name": "UpdateQuickIndexCapacity",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update index capacity",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatequicksightqsearchconfiguration": {
     "name": "UpdateQuickSightQSearchConfiguration",
     "description": "Grants permission to update QuickSight Q Search configuration",
@@ -4521,15 +4513,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateresourcepermissions": {
-    "name": "UpdateResourcePermissions",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update resource-level permissions in QuickSight",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updaterolecustompermission": {
     "name": "UpdateRoleCustomPermission",
     "description": "Grants permission to update the custom permission associated with a role",
@@ -4587,7 +4570,7 @@
   "updatespacepermissions": {
     "name": "UpdateSpacePermissions",
     "description": "Grants permission to update permissions for a space",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "space",
@@ -4647,7 +4630,7 @@
   "updatetemplatepermissions": {
     "name": "UpdateTemplatePermissions",
     "description": "Grants permission to update permissions for a template",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "template",
@@ -4692,7 +4675,7 @@
   "updatethemepermissions": {
     "name": "UpdateThemePermissions",
     "description": "Grants permission to update permissions for a theme",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "theme",
@@ -4710,16 +4693,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "topic",
-        "required": true,
+        "name": "dataset",
+        "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "quicksight:PassDataSet"
-        ]
+        "dependentActions": []
       },
       {
-        "name": "dataset",
-        "required": false,
+        "name": "topic",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -4733,7 +4714,7 @@
   "updatetopicpermissions": {
     "name": "UpdateTopicPermissions",
     "description": "Grants permission to update the resource policy of a topic",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "topic",
@@ -4802,9 +4783,7 @@
         "name": "vpcconnection",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [