@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/health-agent.json

@@ -1,28 +1,6 @@
 {
-  "activatesubscription": {
-    "name": "ActivateSubscription",
-    "description": "Grants permission to activate a subscription to enable billing for a user",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Domain",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "Subscription",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "cancelappointment": {
     "name": "CancelAppointment",
-    "isPermissionOnly": true,
     "description": "Grants permission to cancel an appointment",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -44,7 +22,6 @@
   },
   "createagent": {
     "name": "CreateAgent",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a new agent with an initial version in DRAFT state",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -64,23 +41,8 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createdomain": {
-    "name": "CreateDomain",
-    "description": "Grants permission to create a new domain for managing HealthAgent resources",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": [
-      "health-agent:TagResource",
-      "iam:PassRole"
-    ]
-  },
   "createintegration": {
     "name": "CreateIntegration",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a new integration for a domain",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -102,7 +64,6 @@
   },
   "createsession": {
     "name": "CreateSession",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a new session with specified agent configurations",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -128,19 +89,19 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createsubscription": {
-    "name": "CreateSubscription",
-    "description": "Grants permission to create a new subscription within a domain for billing and user management",
+  "deleteagent": {
+    "name": "DeleteAgent",
+    "description": "Grants permission to delete an agent configuration and all its versions",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "Domain",
+        "name": "Agent",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "Subscription",
+        "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -149,9 +110,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deactivatesubscription": {
-    "name": "DeactivateSubscription",
-    "description": "Grants permission to deactivate a subscription to stop billing for a user",
+  "deleteintegration": {
+    "name": "DeleteIntegration",
+    "description": "Grants permission to delete an integration",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -161,7 +122,7 @@
         "dependentActions": []
       },
       {
-        "name": "Subscription",
+        "name": "Integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -170,11 +131,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteagent": {
-    "name": "DeleteAgent",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete an agent configuration and all its versions",
-    "accessLevel": "Write",
+  "getagent": {
+    "name": "GetAgent",
+    "description": "Grants permission to retrieve an agent configuration, defaulting to the most recent version if not specified",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Agent",
@@ -192,26 +152,31 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletedomain": {
-    "name": "DeleteDomain",
-    "description": "Grants permission to delete a domain and all associated resources",
-    "accessLevel": "Write",
+  "getcareteamprovider": {
+    "name": "GetCareTeamProvider",
+    "description": "Grants permission to retrieve the care team provider of a patient",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteintegration": {
-    "name": "DeleteIntegration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete an integration",
-    "accessLevel": "Write",
+  "getintegration": {
+    "name": "GetIntegration",
+    "description": "Grants permission to get an existing integration",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Domain",
@@ -229,20 +194,19 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getagent": {
-    "name": "GetAgent",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve an agent configuration, defaulting to the most recent version if not specified",
+  "getpatient": {
+    "name": "GetPatient",
+    "description": "Grants permission to retrieve patient information",
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "Agent",
+        "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "Domain",
+        "name": "Integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -251,10 +215,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getcareteamprovider": {
-    "name": "GetCareTeamProvider",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve the care team provider of a patient",
+  "getpractitioner": {
+    "name": "GetPractitioner",
+    "description": "Grants permission to retrieve practitioner information",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -273,9 +236,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getdomain": {
-    "name": "GetDomain",
-    "description": "Grants permission to retrieve information about a domain",
+  "getsessioncontext": {
+    "name": "GetSessionContext",
+    "description": "Grants permission to retrieve structured session context including attributes and collected data",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -283,30 +246,56 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getdomainanalytics": {
-    "name": "GetDomainAnalytics",
-    "description": "Grants permission to retrieve aggregated analytics for a domain",
-    "accessLevel": "Read",
+  "invokeagent": {
+    "name": "InvokeAgent",
+    "description": "Grants permission to invoke an agent within a session with streaming response support",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getintegration": {
-    "name": "GetIntegration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get an existing integration",
+  "listagents": {
+    "name": "ListAgents",
+    "description": "Grants permission to list all agents in a domain",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listappointmentslots": {
+    "name": "ListAppointmentSlots",
+    "description": "Grants permission to list available appointment slots",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -325,31 +314,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmedicalscribelisteningsession": {
-    "name": "GetMedicalScribeListeningSession",
-    "description": "Grants permission to retrieve details about an existing Medical Scribe listening session",
-    "accessLevel": "Read",
+  "listintegrations": {
+    "name": "ListIntegrations",
+    "description": "Grants permission to list integrations for a domain",
+    "accessLevel": "List",
     "resourceTypes": [
       {
         "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "Subscription",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getpatient": {
-    "name": "GetPatient",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve patient information",
+  "listpatientappointments": {
+    "name": "ListPatientAppointments",
+    "description": "Grants permission to list patient appointments",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -368,9 +350,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getpatientinsightsjob": {
-    "name": "GetPatientInsightsJob",
-    "description": "Grants permission to get details of a started patient insights job",
+  "listpatientinsurancecoverages": {
+    "name": "ListPatientInsuranceCoverages",
+    "description": "Grants permission to list patient insurance coverages",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -380,7 +362,7 @@
         "dependentActions": []
       },
       {
-        "name": "PatientInsightsJob",
+        "name": "Integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -389,10 +371,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getpractitioner": {
-    "name": "GetPractitioner",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve practitioner information",
+  "listpatientmedications": {
+    "name": "ListPatientMedications",
+    "description": "Grants permission to list patient medications",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -411,10 +392,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getsessioncontext": {
-    "name": "GetSessionContext",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve structured session context including attributes and collected data",
+  "listproviders": {
+    "name": "ListProviders",
+    "description": "Grants permission to retrieve active providers available for scheduling appointments with a patient",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -424,7 +404,7 @@
         "dependentActions": []
       },
       {
-        "name": "Session",
+        "name": "Integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -433,9 +413,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getsubscription": {
-    "name": "GetSubscription",
-    "description": "Grants permission to retrieve information about a subscription",
+  "matchpatient": {
+    "name": "MatchPatient",
+    "description": "Grants permission to match a patient",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -445,7 +425,7 @@
         "dependentActions": []
       },
       {
-        "name": "Subscription",
+        "name": "Integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -454,20 +434,19 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "invokeagent": {
-    "name": "InvokeAgent",
-    "isPermissionOnly": true,
-    "description": "Grants permission to invoke an agent within a session with streaming response support",
+  "publishagent": {
+    "name": "PublishAgent",
+    "description": "Grants permission to publish an agent configuration version",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "Domain",
+        "name": "Agent",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "Session",
+        "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -476,27 +455,31 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listagents": {
-    "name": "ListAgents",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list all agents in a domain",
-    "accessLevel": "List",
+  "rescheduleappointment": {
+    "name": "RescheduleAppointment",
+    "description": "Grants permission to reschedule an appointment",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listappointmentslots": {
-    "name": "ListAppointmentSlots",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list available appointment slots",
-    "accessLevel": "Read",
+  "resetpassword": {
+    "name": "ResetPassword",
+    "description": "Grants permission to reset a patient MyChart password via email or SMS",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
@@ -514,35 +497,31 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listdomains": {
-    "name": "ListDomains",
-    "description": "Grants permission to list domains for a given account",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listintegrations": {
-    "name": "ListIntegrations",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list integrations for a domain",
-    "accessLevel": "List",
+  "scheduleappointment": {
+    "name": "ScheduleAppointment",
+    "description": "Grants permission to schedule an appointment for a patient",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listpatientappointments": {
-    "name": "ListPatientAppointments",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list patient appointments",
-    "accessLevel": "Read",
+  "submitmedicationrenewal": {
+    "name": "SubmitMedicationRenewal",
+    "description": "Grants permission to submit a medication renewal for a patient",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
@@ -560,20 +539,19 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listpatientinsurancecoverages": {
-    "name": "ListPatientInsuranceCoverages",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list patient insurance coverages",
-    "accessLevel": "Read",
+  "updateagent": {
+    "name": "UpdateAgent",
+    "description": "Grants permission to update a draft agent configuration, creating a new draft version if none exists",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "Domain",
+        "name": "Agent",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "Integration",
+        "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -582,11 +560,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listproviders": {
-    "name": "ListProviders",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve active providers available for scheduling appointments with a patient",
-    "accessLevel": "Read",
+  "updateintegration": {
+    "name": "UpdateIntegration",
+    "description": "Grants permission to update an existing integration",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
@@ -604,44 +581,73 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listsessionrecords": {
-    "name": "ListSessionRecords",
-    "description": "Grants permission to list session records for a domain",
-    "accessLevel": "List",
+  "updatesession": {
+    "name": "UpdateSession",
+    "description": "Grants permission to update session attributes such as departmentId and appointmentType",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listsubscriptions": {
-    "name": "ListSubscriptions",
-    "description": "Grants permission to list all subscriptions within a domain",
-    "accessLevel": "List",
+  "activatesubscription": {
+    "name": "ActivateSubscription",
+    "description": "Grants permission to activate a subscription to enable billing for a user",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "Subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listtagsforresource": {
-    "name": "ListTagsForResource",
-    "description": "Grants permission to list the tags for the specified resource",
-    "accessLevel": "List",
+  "createdomain": {
+    "name": "CreateDomain",
+    "description": "Grants permission to create a new domain for managing HealthAgent resources",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createsubscription": {
+    "name": "CreateSubscription",
+    "description": "Grants permission to create a new subscription within a domain for billing and user management",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
-        "required": false,
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Subscription",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -649,11 +655,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "matchpatient": {
-    "name": "MatchPatient",
-    "isPermissionOnly": true,
-    "description": "Grants permission to match a patient",
-    "accessLevel": "Read",
+  "deactivatesubscription": {
+    "name": "DeactivateSubscription",
+    "description": "Grants permission to deactivate a subscription to stop billing for a user",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Domain",
@@ -662,7 +667,7 @@
         "dependentActions": []
       },
       {
-        "name": "Integration",
+        "name": "Subscription",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -671,18 +676,11 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "publishagent": {
-    "name": "PublishAgent",
-    "isPermissionOnly": true,
-    "description": "Grants permission to publish an agent configuration version",
+  "deletedomain": {
+    "name": "DeleteDomain",
+    "description": "Grants permission to delete a domain and all associated resources",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "Agent",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "Domain",
         "required": true,
@@ -693,20 +691,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "rescheduleappointment": {
-    "name": "RescheduleAppointment",
-    "isPermissionOnly": true,
-    "description": "Grants permission to reschedule an appointment",
-    "accessLevel": "Write",
+  "getdomain": {
+    "name": "GetDomain",
+    "description": "Grants permission to retrieve information about a domain",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdomainanalytics": {
+    "name": "GetDomainAnalytics",
+    "description": "Grants permission to retrieve aggregated analytics for a domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
       {
-        "name": "Integration",
+        "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -715,11 +721,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "scheduleappointment": {
-    "name": "ScheduleAppointment",
-    "isPermissionOnly": true,
-    "description": "Grants permission to schedule an appointment for a patient",
-    "accessLevel": "Write",
+  "getmedicalscribelisteningsession": {
+    "name": "GetMedicalScribeListeningSession",
+    "description": "Grants permission to retrieve details about an existing Medical Scribe listening session",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Domain",
@@ -728,7 +733,7 @@
         "dependentActions": []
       },
       {
-        "name": "Integration",
+        "name": "Subscription",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -737,10 +742,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "startmedicalscribelisteningsession": {
-    "name": "StartMedicalScribeListeningSession",
-    "description": "Grants permission to start a new Medical Scribe listening session for real-time audio transcription",
-    "accessLevel": "Write",
+  "getpatientinsightsjob": {
+    "name": "GetPatientInsightsJob",
+    "description": "Grants permission to get details of a started patient insights job",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Domain",
@@ -749,7 +754,7 @@
         "dependentActions": []
       },
       {
-        "name": "Subscription",
+        "name": "PatientInsightsJob",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -758,10 +763,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "startpatientinsightsjob": {
-    "name": "StartPatientInsightsJob",
-    "description": "Grants permission to start a new patient insights job",
-    "accessLevel": "Write",
+  "getsubscription": {
+    "name": "GetSubscription",
+    "description": "Grants permission to retrieve information about a subscription",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Domain",
@@ -770,7 +775,7 @@
         "dependentActions": []
       },
       {
-        "name": "PatientInsightsJob",
+        "name": "Subscription",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -779,30 +784,48 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "tagresource": {
-    "name": "TagResource",
-    "description": "Grants permission to add the specified tags to the specified resource",
-    "accessLevel": "Tagging",
+  "listdomains": {
+    "name": "ListDomains",
+    "description": "Grants permission to list domains for a given account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsessionrecords": {
+    "name": "ListSessionRecords",
+    "description": "Grants permission to list session records for a domain",
+    "accessLevel": "List",
     "resourceTypes": [
       {
         "name": "Domain",
-        "required": false,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
+        "required": true,
+        "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsubscriptions": {
+    "name": "ListSubscriptions",
+    "description": "Grants permission to list all subscriptions within a domain",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
     ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "untagresource": {
-    "name": "UntagResource",
-    "description": "Grants permission to remove the tags identified by the TagKeys list from a resource",
-    "accessLevel": "Tagging",
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for the specified resource",
+    "accessLevel": "List",
     "resourceTypes": [
       {
         "name": "Domain",
@@ -811,25 +834,22 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "updateagent": {
-    "name": "UpdateAgent",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update a draft agent configuration, creating a new draft version if none exists",
+  "startmedicalscribelisteningsession": {
+    "name": "StartMedicalScribeListeningSession",
+    "description": "Grants permission to start a new Medical Scribe listening session for real-time audio transcription",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "Agent",
+        "name": "Domain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "Domain",
+        "name": "Subscription",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -838,10 +858,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateintegration": {
-    "name": "UpdateIntegration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update an existing integration",
+  "startpatientinsightsjob": {
+    "name": "StartPatientInsightsJob",
+    "description": "Grants permission to start a new patient insights job",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -851,7 +870,7 @@
         "dependentActions": []
       },
       {
-        "name": "Integration",
+        "name": "PatientInsightsJob",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -860,26 +879,41 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updatesession": {
-    "name": "UpdateSession",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update session attributes such as departmentId and appointmentType",
-    "accessLevel": "Write",
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add the specified tags to the specified resource",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Domain",
-        "required": true,
-        "conditionKeys": [],
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
-      },
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove the tags identified by the TagKeys list from a resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
       {
-        "name": "Session",
-        "required": true,
+        "name": "Domain",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   }
 }