aws-iam-language-server 0.0.7 → 0.0.9

package/src/data/servicereference/services/workspaces-web.json

@@ -1 +1 @@
-{"name":"workspaces-web","actions":{"AssociateBrowserSettings":{"conditionKeys":[],"resources":[{"name":"browserSettings"},{"name":"portal"}],"description":"Grants permission to associate browser settings to web portals","accessLevel":"Write","resourceTypes":[{"name":"browserSettings","required":true},{"name":"portal","required":true}]},"AssociateDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"dataProtectionSettings"},{"name":"portal"}],"description":"Grants permission to associate data protection settings with web portals","accessLevel":"Write","resourceTypes":[{"name":"dataProtectionSettings","required":true},{"name":"portal","required":true}]},"AssociateIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"ipAccessSettings"},{"name":"portal"}],"description":"Grants permission to associate ip access settings with web portals","accessLevel":"Write","resourceTypes":[{"name":"ipAccessSettings","required":true},{"name":"portal","required":true}]},"AssociateNetworkSettings":{"conditionKeys":[],"resources":[{"name":"networkSettings"},{"name":"portal"}],"description":"Grants permission to associate network settings to web portals","accessLevel":"Write","resourceTypes":[{"name":"networkSettings","required":true},{"name":"portal","required":true}],"dependentActions":["ec2:CreateNetworkInterface","ec2:CreateNetworkInterfacePermission","ec2:CreateTags","ec2:DeleteNetworkInterface","ec2:DeleteNetworkInterfacePermission","ec2:ModifyNetworkInterfaceAttribute"]},"AssociateSessionLogger":{"conditionKeys":[],"resources":[{"name":"portal"},{"name":"sessionLogger"}],"description":"Grants permission to associate session logger with web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true},{"name":"sessionLogger","required":true}]},"AssociateTrustStore":{"conditionKeys":[],"resources":[{"name":"portal"},{"name":"trustStore"}],"description":"Grants permission to associate trust stores with web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true},{"name":"trustStore","required":true}]},"AssociateUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"portal"},{"name":"userAccessLoggingSettings"}],"description":"Grants permission to associate user access logging settings with web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true},{"name":"userAccessLoggingSettings","required":true}],"dependentActions":["kinesis:PutRecord","kinesis:PutRecords"]},"AssociateUserSettings":{"conditionKeys":[],"resources":[{"name":"portal"},{"name":"userSettings"}],"description":"Grants permission to associate user settings with web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true},{"name":"userSettings","required":true}]},"CreateBrowserSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create browser settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:CreateGrant","kms:Decrypt","kms:DescribeKey","kms:GenerateDataKey","workspaces-web:TagResource"]},"CreateDataProtectionSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create data protection settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"]},"CreateIdentityProvider":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"identityProvider"},{"name":"portal"}],"description":"Grants permission to create identity providers","accessLevel":"Write","resourceTypes":[{"name":"identityProvider","required":true},{"name":"portal","required":true}]},"CreateIpAccessSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create ip access settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"]},"CreateNetworkSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create network settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","workspaces-web:TagResource"]},"CreatePortal":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create web portals","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","kms:CreateGrant","kms:Decrypt","kms:DescribeKey","kms:GenerateDataKey","workspaces-web:TagResource"]},"CreateSessionLogger":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create session logger","accessLevel":"Write","resourceTypes":[],"dependentActions":["s3:PutObject","workspaces-web:TagResource"]},"CreateTrustStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create trust stores","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"]},"CreateUserAccessLoggingSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create user access logging settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"]},"CreateUserSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create user settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"]},"DeleteBrowserSettings":{"conditionKeys":[],"resources":[{"name":"browserSettings"}],"description":"Grants permission to delete browser settings","accessLevel":"Write","resourceTypes":[{"name":"browserSettings","required":true}]},"DeleteDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"dataProtectionSettings"}],"description":"Grants permission to delete data protection settings","accessLevel":"Write","resourceTypes":[{"name":"dataProtectionSettings","required":true}]},"DeleteIdentityProvider":{"conditionKeys":[],"resources":[{"name":"identityProvider"},{"name":"portal"}],"description":"Grants permission to delete identity providers","accessLevel":"Write","resourceTypes":[{"name":"identityProvider","required":true},{"name":"portal","required":true}]},"DeleteIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"ipAccessSettings"}],"description":"Grants permission to delete ip access settings","accessLevel":"Write","resourceTypes":[{"name":"ipAccessSettings","required":true}]},"DeleteNetworkSettings":{"conditionKeys":[],"resources":[{"name":"networkSettings"}],"description":"Grants permission to delete network settings","accessLevel":"Write","resourceTypes":[{"name":"networkSettings","required":true}]},"DeletePortal":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to delete web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"DeleteSessionLogger":{"conditionKeys":[],"resources":[{"name":"sessionLogger"}],"description":"Grants permission to delete session logger","accessLevel":"Write","resourceTypes":[{"name":"sessionLogger","required":true}]},"DeleteTrustStore":{"conditionKeys":[],"resources":[{"name":"trustStore"}],"description":"Grants permission to delete trust stores","accessLevel":"Write","resourceTypes":[{"name":"trustStore","required":true}]},"DeleteUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"userAccessLoggingSettings"}],"description":"Grants permission to delete user access logging settings","accessLevel":"Write","resourceTypes":[{"name":"userAccessLoggingSettings","required":true}]},"DeleteUserSettings":{"conditionKeys":[],"resources":[{"name":"userSettings"}],"description":"Grants permission to delete user settings","accessLevel":"Write","resourceTypes":[{"name":"userSettings","required":true}]},"DisassociateBrowserSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate browser settings from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"DisassociateDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate data protection logging from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"DisassociateIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate ip access logging from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"DisassociateNetworkSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate network settings from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"DisassociateSessionLogger":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate session logger from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"DisassociateTrustStore":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate trust stores from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"DisassociateUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate user access logging settings from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"DisassociateUserSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate user settings from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"ExpireSession":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to expire a session from a specific portal","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"GetBrowserSettings":{"conditionKeys":[],"resources":[{"name":"browserSettings"}],"description":"Grants permission to get details on browser settings","accessLevel":"Read","resourceTypes":[{"name":"browserSettings","required":true}]},"GetDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"dataProtectionSettings"}],"description":"Grants permission to get details on data protection settings","accessLevel":"Read","resourceTypes":[{"name":"dataProtectionSettings","required":true}]},"GetIdentityProvider":{"conditionKeys":[],"resources":[{"name":"identityProvider"}],"description":"Grants permission to get details on identity providers","accessLevel":"Read","resourceTypes":[{"name":"identityProvider","required":true}]},"GetIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"ipAccessSettings"}],"description":"Grants permission to get details on ip access settings","accessLevel":"Read","resourceTypes":[{"name":"ipAccessSettings","required":true}]},"GetNetworkSettings":{"conditionKeys":[],"resources":[{"name":"networkSettings"}],"description":"Grants permission to get details on network settings","accessLevel":"Read","resourceTypes":[{"name":"networkSettings","required":true}]},"GetPortal":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to get details on web portals","accessLevel":"Read","resourceTypes":[{"name":"portal","required":true}]},"GetPortalServiceProviderMetadata":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to get service provider metadata information for web portals","accessLevel":"Read","resourceTypes":[{"name":"portal","required":true}]},"GetSession":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to get information about a particular session for a portal","accessLevel":"Read","resourceTypes":[{"name":"portal","required":true}]},"GetSessionLogger":{"conditionKeys":[],"resources":[{"name":"sessionLogger"}],"description":"Grants permission to get details on session logger","accessLevel":"Read","resourceTypes":[{"name":"sessionLogger","required":true}]},"GetTrustStore":{"conditionKeys":[],"resources":[{"name":"trustStore"}],"description":"Grants permission to get details on trust stores","accessLevel":"Read","resourceTypes":[{"name":"trustStore","required":true}]},"GetTrustStoreCertificate":{"conditionKeys":[],"resources":[{"name":"trustStore"}],"description":"Grants permission to get certificates from trust stores","accessLevel":"Read","resourceTypes":[{"name":"trustStore","required":true}]},"GetUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"userAccessLoggingSettings"}],"description":"Grants permission to get details on user access logging settings","accessLevel":"Read","resourceTypes":[{"name":"userAccessLoggingSettings","required":true}]},"GetUserSettings":{"conditionKeys":[],"resources":[{"name":"userSettings"}],"description":"Grants permission to get details on user settings","accessLevel":"Read","resourceTypes":[{"name":"userSettings","required":true}]},"ListBrowserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list browser settings","accessLevel":"Read","resourceTypes":[]},"ListDataProtectionSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list data protection settings","accessLevel":"Read","resourceTypes":[]},"ListIdentityProviders":{"conditionKeys":[],"resources":[{"name":"identityProvider"}],"description":"Grants permission to list identity providers","accessLevel":"Read","resourceTypes":[{"name":"identityProvider","required":true}]},"ListIpAccessSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list ip access settings","accessLevel":"Read","resourceTypes":[]},"ListNetworkSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list network settings","accessLevel":"Read","resourceTypes":[]},"ListPortals":{"conditionKeys":[],"resources":[],"description":"Grants permission to list web portals","accessLevel":"Read","resourceTypes":[]},"ListSessionLoggers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list session loggers","accessLevel":"Read","resourceTypes":[]},"ListSessions":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to list sessions for a Portal using optional filters","accessLevel":"Read","resourceTypes":[{"name":"portal","required":true}]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[]},"ListTrustStoreCertificates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list certificates in a trust store","accessLevel":"Read","resourceTypes":[]},"ListTrustStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to list trust stores","accessLevel":"Read","resourceTypes":[]},"ListUserAccessLoggingSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list user access logging settings","accessLevel":"Read","resourceTypes":[]},"ListUserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list user settings","accessLevel":"Read","resourceTypes":[]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"browserSettings"},{"name":"dataProtectionSettings"},{"name":"identityProvider"},{"name":"ipAccessSettings"},{"name":"networkSettings"},{"name":"portal"},{"name":"sessionLogger"},{"name":"trustStore"},{"name":"userAccessLoggingSettings"},{"name":"userSettings"}],"description":"Grants permission to add one or more tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"browserSettings","required":false},{"name":"dataProtectionSettings","required":false},{"name":"identityProvider","required":false},{"name":"ipAccessSettings","required":false},{"name":"networkSettings","required":false},{"name":"portal","required":false},{"name":"sessionLogger","required":false},{"name":"trustStore","required":false},{"name":"userAccessLoggingSettings","required":false},{"name":"userSettings","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"browserSettings"},{"name":"dataProtectionSettings"},{"name":"identityProvider"},{"name":"ipAccessSettings"},{"name":"networkSettings"},{"name":"portal"},{"name":"sessionLogger"},{"name":"trustStore"},{"name":"userAccessLoggingSettings"},{"name":"userSettings"}],"description":"Grants permission to remove one or more tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"browserSettings","required":false},{"name":"dataProtectionSettings","required":false},{"name":"identityProvider","required":false},{"name":"ipAccessSettings","required":false},{"name":"networkSettings","required":false},{"name":"portal","required":false},{"name":"sessionLogger","required":false},{"name":"trustStore","required":false},{"name":"userAccessLoggingSettings","required":false},{"name":"userSettings","required":false}]},"UpdateBrowserSettings":{"conditionKeys":[],"resources":[{"name":"browserSettings"}],"description":"Grants permission to update browser settings","accessLevel":"Write","resourceTypes":[{"name":"browserSettings","required":true}]},"UpdateDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"dataProtectionSettings"}],"description":"Grants permission to update data protection settings","accessLevel":"Write","resourceTypes":[{"name":"dataProtectionSettings","required":true}]},"UpdateIdentityProvider":{"conditionKeys":[],"resources":[{"name":"identityProvider"},{"name":"portal"}],"description":"Grants permission to update identity provider","accessLevel":"Write","resourceTypes":[{"name":"identityProvider","required":true},{"name":"portal","required":true}]},"UpdateIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"ipAccessSettings"}],"description":"Grants permission to update ip access settings","accessLevel":"Write","resourceTypes":[{"name":"ipAccessSettings","required":true}]},"UpdateNetworkSettings":{"conditionKeys":[],"resources":[{"name":"networkSettings"}],"description":"Grants permission to update network settings","accessLevel":"Write","resourceTypes":[{"name":"networkSettings","required":true}],"dependentActions":["ec2:CreateNetworkInterface","ec2:CreateNetworkInterfacePermission","ec2:CreateTags","ec2:DeleteNetworkInterface","ec2:DeleteNetworkInterfacePermission","ec2:ModifyNetworkInterfaceAttribute"]},"UpdatePortal":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to update web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}]},"UpdateSessionLogger":{"conditionKeys":[],"resources":[{"name":"sessionLogger"}],"description":"Grants permission to update session logger","accessLevel":"Write","resourceTypes":[{"name":"sessionLogger","required":true}]},"UpdateTrustStore":{"conditionKeys":[],"resources":[{"name":"trustStore"}],"description":"Grants permission to update trust stores","accessLevel":"Write","resourceTypes":[{"name":"trustStore","required":true}]},"UpdateUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"userAccessLoggingSettings"}],"description":"Grants permission to update user access logging settings","accessLevel":"Write","resourceTypes":[{"name":"userAccessLoggingSettings","required":true}],"dependentActions":["kinesis:PutRecord","kinesis:PutRecords"]},"UpdateUserSettings":{"conditionKeys":[],"resources":[{"name":"userSettings"}],"description":"Grants permission to update user settings","accessLevel":"Write","resourceTypes":[{"name":"userSettings","required":true}]}},"resources":[{"name":"browserSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:browserSettings/${BrowserSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dataProtectionSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:dataProtectionSettings/${DataProtectionSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"identityProvider","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/${PortalId}/${IdentityProviderId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ipAccessSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:ipAccessSettings/${IpAccessSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"networkSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:networkSettings/${NetworkSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"portal","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:portal/${PortalId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"sessionLogger","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:sessionLogger/${SessionLoggerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"trustStore","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:trustStore/${TrustStoreId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"userAccessLoggingSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:userAccessLoggingSettings/${UserAccessLoggingSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"userSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:userSettings/${UserSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}}}
+{"name":"workspaces-web","actions":{"AssociateBrowserSettings":{"conditionKeys":[],"resources":[{"name":"browserSettings"},{"name":"portal"}],"description":"Grants permission to associate browser settings to web portals","accessLevel":"Write","resourceTypes":[{"name":"browserSettings","required":true},{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateBrowserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-AssociateBrowserSettings"},"AssociateDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"dataProtectionSettings"},{"name":"portal"}],"description":"Grants permission to associate data protection settings with web portals","accessLevel":"Write","resourceTypes":[{"name":"dataProtectionSettings","required":true},{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateDataProtectionSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-AssociateDataProtectionSettings"},"AssociateIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"ipAccessSettings"},{"name":"portal"}],"description":"Grants permission to associate ip access settings with web portals","accessLevel":"Write","resourceTypes":[{"name":"ipAccessSettings","required":true},{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateIpAccessSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-AssociateIpAccessSettings"},"AssociateNetworkSettings":{"conditionKeys":[],"resources":[{"name":"networkSettings"},{"name":"portal"}],"description":"Grants permission to associate network settings to web portals","accessLevel":"Write","resourceTypes":[{"name":"networkSettings","required":true},{"name":"portal","required":true}],"dependentActions":["ec2:CreateNetworkInterface","ec2:CreateNetworkInterfacePermission","ec2:CreateTags","ec2:DeleteNetworkInterface","ec2:DeleteNetworkInterfacePermission","ec2:ModifyNetworkInterfaceAttribute"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateNetworkSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-AssociateNetworkSettings"},"AssociateSessionLogger":{"conditionKeys":[],"resources":[{"name":"portal"},{"name":"sessionLogger"}],"description":"Grants permission to associate session logger with web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true},{"name":"sessionLogger","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateSessionLogger.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-AssociateSessionLogger"},"AssociateTrustStore":{"conditionKeys":[],"resources":[{"name":"portal"},{"name":"trustStore"}],"description":"Grants permission to associate trust stores with web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true},{"name":"trustStore","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-AssociateTrustStore"},"AssociateUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"portal"},{"name":"userAccessLoggingSettings"}],"description":"Grants permission to associate user access logging settings with web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true},{"name":"userAccessLoggingSettings","required":true}],"dependentActions":["kinesis:PutRecord","kinesis:PutRecords"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateUserAccessLoggingSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-AssociateUserAccessLoggingSettings"},"AssociateUserSettings":{"conditionKeys":[],"resources":[{"name":"portal"},{"name":"userSettings"}],"description":"Grants permission to associate user settings with web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true},{"name":"userSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateUserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-AssociateUserSettings"},"CreateBrowserSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create browser settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["kms:CreateGrant","kms:Decrypt","kms:DescribeKey","kms:GenerateDataKey","workspaces-web:TagResource"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateBrowserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreateBrowserSettings"},"CreateDataProtectionSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create data protection settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateDataProtectionSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreateDataProtectionSettings"},"CreateIdentityProvider":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"identityProvider"},{"name":"portal"}],"description":"Grants permission to create identity providers","accessLevel":"Write","resourceTypes":[{"name":"identityProvider","required":true},{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateIdentityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreateIdentityProvider"},"CreateIpAccessSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create ip access settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateIpAccessSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreateIpAccessSettings"},"CreateNetworkSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create network settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","workspaces-web:TagResource"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateNetworkSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreateNetworkSettings"},"CreatePortal":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create web portals","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:CreateServiceLinkedRole","kms:CreateGrant","kms:Decrypt","kms:DescribeKey","kms:GenerateDataKey","workspaces-web:TagResource"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreatePortal.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreatePortal"},"CreateSessionLogger":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create session logger","accessLevel":"Write","resourceTypes":[],"dependentActions":["s3:PutObject","workspaces-web:TagResource"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateSessionLogger.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreateSessionLogger"},"CreateTrustStore":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create trust stores","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreateTrustStore"},"CreateUserAccessLoggingSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create user access logging settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateUserAccessLoggingSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreateUserAccessLoggingSettings"},"CreateUserSettings":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create user settings","accessLevel":"Write","resourceTypes":[],"dependentActions":["workspaces-web:TagResource"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateUserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-CreateUserSettings"},"DeleteBrowserSettings":{"conditionKeys":[],"resources":[{"name":"browserSettings"}],"description":"Grants permission to delete browser settings","accessLevel":"Write","resourceTypes":[{"name":"browserSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteBrowserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeleteBrowserSettings"},"DeleteDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"dataProtectionSettings"}],"description":"Grants permission to delete data protection settings","accessLevel":"Write","resourceTypes":[{"name":"dataProtectionSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteDataProtectionSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeleteDataProtectionSettings"},"DeleteIdentityProvider":{"conditionKeys":[],"resources":[{"name":"identityProvider"},{"name":"portal"}],"description":"Grants permission to delete identity providers","accessLevel":"Write","resourceTypes":[{"name":"identityProvider","required":true},{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteIdentityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeleteIdentityProvider"},"DeleteIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"ipAccessSettings"}],"description":"Grants permission to delete ip access settings","accessLevel":"Write","resourceTypes":[{"name":"ipAccessSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteIpAccessSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeleteIpAccessSettings"},"DeleteNetworkSettings":{"conditionKeys":[],"resources":[{"name":"networkSettings"}],"description":"Grants permission to delete network settings","accessLevel":"Write","resourceTypes":[{"name":"networkSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteNetworkSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeleteNetworkSettings"},"DeletePortal":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to delete web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeletePortal.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeletePortal"},"DeleteSessionLogger":{"conditionKeys":[],"resources":[{"name":"sessionLogger"}],"description":"Grants permission to delete session logger","accessLevel":"Write","resourceTypes":[{"name":"sessionLogger","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteSessionLogger.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeleteSessionLogger"},"DeleteTrustStore":{"conditionKeys":[],"resources":[{"name":"trustStore"}],"description":"Grants permission to delete trust stores","accessLevel":"Write","resourceTypes":[{"name":"trustStore","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeleteTrustStore"},"DeleteUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"userAccessLoggingSettings"}],"description":"Grants permission to delete user access logging settings","accessLevel":"Write","resourceTypes":[{"name":"userAccessLoggingSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteUserAccessLoggingSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeleteUserAccessLoggingSettings"},"DeleteUserSettings":{"conditionKeys":[],"resources":[{"name":"userSettings"}],"description":"Grants permission to delete user settings","accessLevel":"Write","resourceTypes":[{"name":"userSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteUserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DeleteUserSettings"},"DisassociateBrowserSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate browser settings from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateBrowserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DisassociateBrowserSettings"},"DisassociateDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate data protection logging from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateDataProtectionSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DisassociateDataProtectionSettings"},"DisassociateIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate ip access logging from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateIpAccessSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DisassociateIpAccessSettings"},"DisassociateNetworkSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate network settings from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateNetworkSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DisassociateNetworkSettings"},"DisassociateSessionLogger":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate session logger from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateSessionLogger.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DisassociateSessionLogger"},"DisassociateTrustStore":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate trust stores from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DisassociateTrustStore"},"DisassociateUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate user access logging settings from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateUserAccessLoggingSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DisassociateUserAccessLoggingSettings"},"DisassociateUserSettings":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to disassociate user settings from web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateUserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-DisassociateUserSettings"},"ExpireSession":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to expire a session from a specific portal","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ExpireSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ExpireSession"},"GetBrowserSettings":{"conditionKeys":[],"resources":[{"name":"browserSettings"}],"description":"Grants permission to get details on browser settings","accessLevel":"Read","resourceTypes":[{"name":"browserSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetBrowserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetBrowserSettings"},"GetDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"dataProtectionSettings"}],"description":"Grants permission to get details on data protection settings","accessLevel":"Read","resourceTypes":[{"name":"dataProtectionSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetDataProtectionSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetDataProtectionSettings"},"GetIdentityProvider":{"conditionKeys":[],"resources":[{"name":"identityProvider"}],"description":"Grants permission to get details on identity providers","accessLevel":"Read","resourceTypes":[{"name":"identityProvider","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetIdentityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetIdentityProvider"},"GetIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"ipAccessSettings"}],"description":"Grants permission to get details on ip access settings","accessLevel":"Read","resourceTypes":[{"name":"ipAccessSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetIpAccessSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetIpAccessSettings"},"GetNetworkSettings":{"conditionKeys":[],"resources":[{"name":"networkSettings"}],"description":"Grants permission to get details on network settings","accessLevel":"Read","resourceTypes":[{"name":"networkSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetNetworkSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetNetworkSettings"},"GetPortal":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to get details on web portals","accessLevel":"Read","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetPortal.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetPortal"},"GetPortalServiceProviderMetadata":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to get service provider metadata information for web portals","accessLevel":"Read","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetPortalServiceProviderMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetPortalServiceProviderMetadata"},"GetSession":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to get information about a particular session for a portal","accessLevel":"Read","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetSession"},"GetSessionLogger":{"conditionKeys":[],"resources":[{"name":"sessionLogger"}],"description":"Grants permission to get details on session logger","accessLevel":"Read","resourceTypes":[{"name":"sessionLogger","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetSessionLogger.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetSessionLogger"},"GetTrustStore":{"conditionKeys":[],"resources":[{"name":"trustStore"}],"description":"Grants permission to get details on trust stores","accessLevel":"Read","resourceTypes":[{"name":"trustStore","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetTrustStore"},"GetTrustStoreCertificate":{"conditionKeys":[],"resources":[{"name":"trustStore"}],"description":"Grants permission to get certificates from trust stores","accessLevel":"Read","resourceTypes":[{"name":"trustStore","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetTrustStoreCertificate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetTrustStoreCertificate"},"GetUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"userAccessLoggingSettings"}],"description":"Grants permission to get details on user access logging settings","accessLevel":"Read","resourceTypes":[{"name":"userAccessLoggingSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetUserAccessLoggingSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetUserAccessLoggingSettings"},"GetUserSettings":{"conditionKeys":[],"resources":[{"name":"userSettings"}],"description":"Grants permission to get details on user settings","accessLevel":"Read","resourceTypes":[{"name":"userSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetUserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-GetUserSettings"},"ListBrowserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list browser settings","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListBrowserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListBrowserSettings"},"ListDataProtectionSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list data protection settings","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListDataProtectionSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListDataProtectionSettings"},"ListIdentityProviders":{"conditionKeys":[],"resources":[{"name":"identityProvider"}],"description":"Grants permission to list identity providers","accessLevel":"Read","resourceTypes":[{"name":"identityProvider","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListIdentityProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListIdentityProviders"},"ListIpAccessSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list ip access settings","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListIpAccessSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListIpAccessSettings"},"ListNetworkSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list network settings","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListNetworkSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListNetworkSettings"},"ListPortals":{"conditionKeys":[],"resources":[],"description":"Grants permission to list web portals","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListPortals.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListPortals"},"ListSessionLoggers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list session loggers","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListSessionLoggers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListSessionLoggers"},"ListSessions":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to list sessions for a Portal using optional filters","accessLevel":"Read","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListSessions"},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags for a resource","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListTagsForResource"},"ListTrustStoreCertificates":{"conditionKeys":[],"resources":[],"description":"Grants permission to list certificates in a trust store","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListTrustStoreCertificates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListTrustStoreCertificates"},"ListTrustStores":{"conditionKeys":[],"resources":[],"description":"Grants permission to list trust stores","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListTrustStores.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListTrustStores"},"ListUserAccessLoggingSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list user access logging settings","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListUserAccessLoggingSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListUserAccessLoggingSettings"},"ListUserSettings":{"conditionKeys":[],"resources":[],"description":"Grants permission to list user settings","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListUserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-ListUserSettings"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"browserSettings"},{"name":"dataProtectionSettings"},{"name":"identityProvider"},{"name":"ipAccessSettings"},{"name":"networkSettings"},{"name":"portal"},{"name":"sessionLogger"},{"name":"trustStore"},{"name":"userAccessLoggingSettings"},{"name":"userSettings"}],"description":"Grants permission to add one or more tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"browserSettings","required":false},{"name":"dataProtectionSettings","required":false},{"name":"identityProvider","required":false},{"name":"ipAccessSettings","required":false},{"name":"networkSettings","required":false},{"name":"portal","required":false},{"name":"sessionLogger","required":false},{"name":"trustStore","required":false},{"name":"userAccessLoggingSettings","required":false},{"name":"userSettings","required":false}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"browserSettings"},{"name":"dataProtectionSettings"},{"name":"identityProvider"},{"name":"ipAccessSettings"},{"name":"networkSettings"},{"name":"portal"},{"name":"sessionLogger"},{"name":"trustStore"},{"name":"userAccessLoggingSettings"},{"name":"userSettings"}],"description":"Grants permission to remove one or more tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"browserSettings","required":false},{"name":"dataProtectionSettings","required":false},{"name":"identityProvider","required":false},{"name":"ipAccessSettings","required":false},{"name":"networkSettings","required":false},{"name":"portal","required":false},{"name":"sessionLogger","required":false},{"name":"trustStore","required":false},{"name":"userAccessLoggingSettings","required":false},{"name":"userSettings","required":false}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UntagResource"},"UpdateBrowserSettings":{"conditionKeys":[],"resources":[{"name":"browserSettings"}],"description":"Grants permission to update browser settings","accessLevel":"Write","resourceTypes":[{"name":"browserSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateBrowserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdateBrowserSettings"},"UpdateDataProtectionSettings":{"conditionKeys":[],"resources":[{"name":"dataProtectionSettings"}],"description":"Grants permission to update data protection settings","accessLevel":"Write","resourceTypes":[{"name":"dataProtectionSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateDataProtectionSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdateDataProtectionSettings"},"UpdateIdentityProvider":{"conditionKeys":[],"resources":[{"name":"identityProvider"},{"name":"portal"}],"description":"Grants permission to update identity provider","accessLevel":"Write","resourceTypes":[{"name":"identityProvider","required":true},{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateIdentityProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdateIdentityProvider"},"UpdateIpAccessSettings":{"conditionKeys":[],"resources":[{"name":"ipAccessSettings"}],"description":"Grants permission to update ip access settings","accessLevel":"Write","resourceTypes":[{"name":"ipAccessSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateIpAccessSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdateIpAccessSettings"},"UpdateNetworkSettings":{"conditionKeys":[],"resources":[{"name":"networkSettings"}],"description":"Grants permission to update network settings","accessLevel":"Write","resourceTypes":[{"name":"networkSettings","required":true}],"dependentActions":["ec2:CreateNetworkInterface","ec2:CreateNetworkInterfacePermission","ec2:CreateTags","ec2:DeleteNetworkInterface","ec2:DeleteNetworkInterfacePermission","ec2:ModifyNetworkInterfaceAttribute"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateNetworkSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdateNetworkSettings"},"UpdatePortal":{"conditionKeys":[],"resources":[{"name":"portal"}],"description":"Grants permission to update web portals","accessLevel":"Write","resourceTypes":[{"name":"portal","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdatePortal.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdatePortal"},"UpdateSessionLogger":{"conditionKeys":[],"resources":[{"name":"sessionLogger"}],"description":"Grants permission to update session logger","accessLevel":"Write","resourceTypes":[{"name":"sessionLogger","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateSessionLogger.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdateSessionLogger"},"UpdateTrustStore":{"conditionKeys":[],"resources":[{"name":"trustStore"}],"description":"Grants permission to update trust stores","accessLevel":"Write","resourceTypes":[{"name":"trustStore","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateTrustStore.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdateTrustStore"},"UpdateUserAccessLoggingSettings":{"conditionKeys":[],"resources":[{"name":"userAccessLoggingSettings"}],"description":"Grants permission to update user access logging settings","accessLevel":"Write","resourceTypes":[{"name":"userAccessLoggingSettings","required":true}],"dependentActions":["kinesis:PutRecord","kinesis:PutRecords"],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateUserAccessLoggingSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdateUserAccessLoggingSettings"},"UpdateUserSettings":{"conditionKeys":[],"resources":[{"name":"userSettings"}],"description":"Grants permission to update user settings","accessLevel":"Write","resourceTypes":[{"name":"userSettings","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateUserSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html#amazonworkspacessecurebrowser-UpdateUserSettings"}},"resources":[{"name":"browserSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:browserSettings/${BrowserSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"dataProtectionSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:dataProtectionSettings/${DataProtectionSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"identityProvider","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/${PortalId}/${IdentityProviderId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"ipAccessSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:ipAccessSettings/${IpAccessSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"networkSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:networkSettings/${NetworkSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"portal","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:portal/${PortalId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"sessionLogger","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:sessionLogger/${SessionLoggerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"trustStore","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:trustStore/${TrustStoreId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"userAccessLoggingSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:userAccessLoggingSettings/${UserAccessLoggingSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"userSettings","arnFormats":["arn:${Partition}:workspaces-web:${Region}:${Account}:userSettings/${UserSettingsId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacessecurebrowser.html"}

package/src/data/servicereference/services/workspaces.json

@@ -1 +1 @@
-{"name":"workspaces","actions":{"AcceptAccountLinkInvitation":{"conditionKeys":[],"resources":[],"description":"Grants permission to accept invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL","accessLevel":"Write","resourceTypes":[]},"AssociateConnectionAlias":{"conditionKeys":[],"resources":[{"name":"connectionalias"},{"name":"directoryid"}],"description":"Grants permission to associate connection aliases with directories","accessLevel":"Write","resourceTypes":[{"name":"connectionalias","required":true},{"name":"directoryid","required":true}]},"AssociateIpGroups":{"conditionKeys":[],"resources":[{"name":"directoryid"},{"name":"workspaceipgroup"}],"description":"Grants permission to associate IP access control groups with directories","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspaceipgroup","required":true}]},"AssociateWorkspaceApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceapplication"},{"name":"workspaceid"}],"description":"Grants permission to associate a workspace application with a WorkSpace","accessLevel":"Write","resourceTypes":[{"name":"workspaceapplication","required":true},{"name":"workspaceid","required":true}]},"AuthorizeIpRules":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to add rules to IP access control groups","accessLevel":"Write","resourceTypes":[{"name":"workspaceipgroup","required":true}],"dependentActions":["workspaces:UpdateRulesOfIpGroup"]},"CopyWorkspaceImage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to copy a WorkSpace image","accessLevel":"Write","resourceTypes":[{"name":"workspaceimage","required":true}],"dependentActions":["workspaces:DescribeWorkspaceImages"]},"CreateAccountLinkInvitation":{"conditionKeys":[],"resources":[],"description":"Grants permission to invite other AWS accounts to share the same configuration for WorkSpaces BYOL","accessLevel":"Write","resourceTypes":[]},"CreateConnectClientAddIn":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to create an Amazon Connect client add-in within a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"CreateConnectionAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create connection aliases for use with cross-Region redirection","accessLevel":"Write","resourceTypes":[]},"CreateIpGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create IP access control groups","accessLevel":"Write","resourceTypes":[]},"CreateRootClientCertificate":{"conditionKeys":[],"resources":[{"name":"certificateid"}],"description":"Grants permission to create a root client certificate","accessLevel":"Write","resourceTypes":[{"name":"certificateid","required":true}],"permissionOnly":true},"CreateStandbyWorkspaces":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"directoryid"},{"name":"workspaceid"}],"description":"Grants permission to create one or more Standby WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspaceid","required":true}]},"CreateTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create tags for WorkSpaces resources","accessLevel":"Tagging","resourceTypes":[]},"CreateUpdatedWorkspaceImage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to create an updated WorkSpace image","accessLevel":"Write","resourceTypes":[{"name":"workspaceimage","required":true}]},"CreateWorkspaceBundle":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workspacebundle"},{"name":"workspaceimage"}],"description":"Grants permission to create a WorkSpace bundle","accessLevel":"Write","resourceTypes":[{"name":"workspacebundle","required":true},{"name":"workspaceimage","required":true}],"dependentActions":["workspaces:CreateTags"]},"CreateWorkspaceImage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workspaceid"}],"description":"Grants permission to create a new WorkSpace image","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"CreateWorkspaces":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"directoryid"},{"name":"workspacebundle"},{"name":"workspaceid"}],"description":"Grants permission to create one or more WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspacebundle","required":true},{"name":"workspaceid","required":true}]},"CreateWorkspacesPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"directoryid"},{"name":"workspacebundle"},{"name":"workspacespoolid"}],"description":"Grants permission to create a WorkSpaces Pool","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspacebundle","required":true},{"name":"workspacespoolid","required":true}]},"DeleteAccountLinkInvitation":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete invitations to other AWS accounts to share the same configuration for WorkSpaces BYOL","accessLevel":"Write","resourceTypes":[]},"DeleteClientBranding":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to delete AWS WorkSpaces Client branding data within a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"DeleteConnectClientAddIn":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to delete an Amazon Connect client add-in that is configured within a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"DeleteConnectionAlias":{"conditionKeys":[],"resources":[{"name":"connectionalias"}],"description":"Grants permission to delete connection aliases","accessLevel":"Write","resourceTypes":[{"name":"connectionalias","required":true}]},"DeleteIpGroup":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to delete IP access control groups","accessLevel":"Write","resourceTypes":[{"name":"workspaceipgroup","required":true}]},"DeleteRootClientCertificate":{"conditionKeys":[],"resources":[{"name":"certificateid"}],"description":"Grants permission to delete root client certificate","accessLevel":"Write","resourceTypes":[{"name":"certificateid","required":true}],"permissionOnly":true},"DeleteTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to delete tags from WorkSpaces resources","accessLevel":"Tagging","resourceTypes":[]},"DeleteWorkspaceBundle":{"conditionKeys":[],"resources":[{"name":"workspacebundle"}],"description":"Grants permission to delete WorkSpace bundles","accessLevel":"Write","resourceTypes":[{"name":"workspacebundle","required":true}]},"DeleteWorkspaceImage":{"conditionKeys":[],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to delete WorkSpace images","accessLevel":"Write","resourceTypes":[{"name":"workspaceimage","required":true}]},"DeployWorkspaceApplications":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceid"}],"description":"Grants permission to deploy all pending workspace applications on a WorkSpace","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"DeregisterWorkspaceDirectory":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to deregister directories from use with Amazon WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"DescribeAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts","accessLevel":"Read","resourceTypes":[]},"DescribeAccountModifications":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve modifications to the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts","accessLevel":"Read","resourceTypes":[]},"DescribeApplicationAssociations":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceapplication"}],"description":"Grants permission to retrieve information about resources associated with a WorkSpace application","accessLevel":"List","resourceTypes":[{"name":"workspaceapplication","required":true}]},"DescribeApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain information about WorkSpace applications","accessLevel":"List","resourceTypes":[]},"DescribeBundleAssociations":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspacebundle"}],"description":"Grants permission to retrieve information about resources associated with a WorkSpace bundle","accessLevel":"List","resourceTypes":[{"name":"workspacebundle","required":true}]},"DescribeClientBranding":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to retrieve AWS WorkSpaces Client branding data within a directory","accessLevel":"Read","resourceTypes":[{"name":"directoryid","required":true}]},"DescribeClientProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to retrieve information about WorkSpaces clients","accessLevel":"List","resourceTypes":[{"name":"directoryid","required":true}]},"DescribeConnectClientAddIns":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to retrieve a list of Amazon Connect client add-ins that have been created","accessLevel":"List","resourceTypes":[{"name":"directoryid","required":true}]},"DescribeConnectionAliasPermissions":{"conditionKeys":[],"resources":[{"name":"connectionalias"}],"description":"Grants permission to retrieve the permissions that the owners of connection aliases have granted to other AWS accounts for connection aliases","accessLevel":"Read","resourceTypes":[{"name":"connectionalias","required":true}]},"DescribeConnectionAliases":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes the connection aliases used for cross-Region redirection","accessLevel":"Read","resourceTypes":[]},"DescribeConsent":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about consent agreement to BYOL minimum requirements","accessLevel":"Read","resourceTypes":[],"permissionOnly":true},"DescribeCustomWorkspaceImageImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about WorkSpace BYOL image import task","accessLevel":"Read","resourceTypes":[]},"DescribeImageAssociations":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to retrieve information about resources associated with a WorkSpace image","accessLevel":"List","resourceTypes":[{"name":"workspaceimage","required":true}]},"DescribeIpGroups":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to retrieve information about IP access control groups","accessLevel":"Read","resourceTypes":[{"name":"workspaceipgroup","required":true}]},"DescribeTags":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the tags for WorkSpaces resources","accessLevel":"Read","resourceTypes":[]},"DescribeWorkspaceAssociations":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceid"}],"description":"Grants permission to retrieve information about resources associated with a WorkSpace","accessLevel":"List","resourceTypes":[{"name":"workspaceid","required":true}]},"DescribeWorkspaceBundles":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain information about WorkSpace bundles","accessLevel":"List","resourceTypes":[]},"DescribeWorkspaceDirectories":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about directories that are registered with WorkSpaces","accessLevel":"Read","resourceTypes":[]},"DescribeWorkspaceImagePermissions":{"conditionKeys":[],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to retrieve information about WorkSpace image permissions","accessLevel":"Read","resourceTypes":[{"name":"workspaceimage","required":true}]},"DescribeWorkspaceImages":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about WorkSpace images","accessLevel":"List","resourceTypes":[]},"DescribeWorkspaceSnapshots":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to retrieve information about WorkSpace snapshots","accessLevel":"List","resourceTypes":[{"name":"workspaceid","required":true}]},"DescribeWorkspaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain information about WorkSpaces","accessLevel":"List","resourceTypes":[]},"DescribeWorkspacesConnectionStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain the connection status of WorkSpaces","accessLevel":"Read","resourceTypes":[]},"DescribeWorkspacesPoolSessions":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to retrieve information about the sessions of a WorkSpaces Pool","accessLevel":"List","resourceTypes":[{"name":"workspacespoolid","required":true}]},"DescribeWorkspacesPools":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about WorkSpaces Pools","accessLevel":"List","resourceTypes":[]},"DirectoryAccessManagement":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to directory management actions while managing and provisioning workspaces","accessLevel":"List","resourceTypes":[{"name":"directoryid","required":true}],"permissionOnly":true},"DisassociateConnectionAlias":{"conditionKeys":[],"resources":[{"name":"connectionalias"}],"description":"Grants permission to disassociate connection aliases from directories","accessLevel":"Write","resourceTypes":[{"name":"connectionalias","required":true}]},"DisassociateIpGroups":{"conditionKeys":[],"resources":[{"name":"directoryid"},{"name":"workspaceipgroup"}],"description":"Grants permission to disassociate IP access control groups from directories","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspaceipgroup","required":true}]},"DisassociateWorkspaceApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceapplication"},{"name":"workspaceid"}],"description":"Grants permission to disassociate a workspace application from a WorkSpace","accessLevel":"Write","resourceTypes":[{"name":"workspaceapplication","required":true},{"name":"workspaceid","required":true}]},"GetAccountLink":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a link with another AWS Account for sharing configuration for WorkSpaces BYOL","accessLevel":"Read","resourceTypes":[]},"ImportClientBranding":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to import AWS WorkSpaces Client branding data within a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"ImportCustomWorkspaceImage":{"conditionKeys":[],"resources":[],"description":"Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces","accessLevel":"Write","resourceTypes":[]},"ImportWorkspaceImage":{"conditionKeys":[],"resources":[],"description":"Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:DescribeImages","ec2:ModifyImageAttribute"]},"ListAccountLinks":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve links with the AWS Account(s) that share your configuration for WorkSpaces BYOL","accessLevel":"List","resourceTypes":[]},"ListAvailableManagementCidrRanges":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the available CIDR ranges for enabling Bring Your Own License (BYOL) for WorkSpaces accounts","accessLevel":"List","resourceTypes":[]},"MigrateWorkspace":{"conditionKeys":[],"resources":[{"name":"workspacebundle"},{"name":"workspaceid"}],"description":"Grants permission to migrate WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspacebundle","required":true},{"name":"workspaceid","required":true}]},"ModifyAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to modify the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts","accessLevel":"Write","resourceTypes":[]},"ModifyCertificateBasedAuthProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the certificate-based authorization properties of a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"ModifyClientProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the properties of WorkSpaces clients","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"ModifyEndpointEncryptionMode":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to configure the specified directory between Standard TLS and FIPS 140-2 validated mode","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"ModifySamlProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the SAML properties of a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"ModifySelfservicePermissions":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the self-service WorkSpace management capabilities for your users","accessLevel":"Permissions management","resourceTypes":[{"name":"directoryid","required":true}]},"ModifyStreamingProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the streaming properties","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"ModifyWorkspaceAccessProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to specify which devices and operating systems users can use to access their WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"ModifyWorkspaceCreationProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the default properties used to create WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"ModifyWorkspaceProperties":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to modify WorkSpace properties, including the running mode and the AutoStop period","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"ModifyWorkspaceState":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to modify the state of WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"RebootWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to reboot WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"RebuildWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to rebuild WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"RegisterWorkspaceDirectory":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"directoryid"}],"description":"Grants permission to register directories for use with Amazon WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"RejectAccountLinkInvitation":{"conditionKeys":[],"resources":[],"description":"Grants permission to reject invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL","accessLevel":"Write","resourceTypes":[]},"RestoreWorkspace":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to restore WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"RevokeIpRules":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to remove rules from IP access control groups","accessLevel":"Write","resourceTypes":[{"name":"workspaceipgroup","required":true}],"dependentActions":["workspaces:UpdateRulesOfIpGroup"]},"StartWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to start AutoStop WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"StartWorkspacesPool":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to start a WorkSpaces Pool","accessLevel":"Write","resourceTypes":[{"name":"workspacespoolid","required":true}]},"StopWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to stop AutoStop WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"StopWorkspacesPool":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to stop a WorkSpaces Pool","accessLevel":"Write","resourceTypes":[{"name":"workspacespoolid","required":true}]},"Stream":{"conditionKeys":["workspaces:userId"],"resources":[{"name":"directoryid"}],"description":"Grants permission to federated users to sign in by using their existing credentials and stream their workspace","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"TerminateWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to terminate WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}]},"TerminateWorkspacesPool":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to terminate a WorkSpaces Pool","accessLevel":"Write","resourceTypes":[{"name":"workspacespoolid","required":true}]},"TerminateWorkspacesPoolSession":{"conditionKeys":[],"resources":[],"description":"Grants permission to terminate a WorkSpaces Pool session","accessLevel":"Write","resourceTypes":[]},"UpdateConnectClientAddIn":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to update an Amazon Connect client add-in. Use this action to update the name and endpoint URL of an Amazon Connect client add-in","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}]},"UpdateConnectionAliasPermission":{"conditionKeys":[],"resources":[{"name":"connectionalias"}],"description":"Grants permission to share or unshare connection aliases with other accounts","accessLevel":"Permissions management","resourceTypes":[{"name":"connectionalias","required":true}]},"UpdateConsent":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the consent agreement to BYOL minimum requirements","accessLevel":"Write","resourceTypes":[],"permissionOnly":true},"UpdateRootClientCertificate":{"conditionKeys":[],"resources":[{"name":"certificateid"}],"description":"Grants permission to update a root client certificate","accessLevel":"Write","resourceTypes":[{"name":"certificateid","required":true}],"permissionOnly":true},"UpdateRulesOfIpGroup":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to replace rules for IP access control groups","accessLevel":"Write","resourceTypes":[{"name":"workspaceipgroup","required":true}],"dependentActions":["workspaces:AuthorizeIpRules","workspaces:RevokeIpRules"]},"UpdateWorkspaceBundle":{"conditionKeys":[],"resources":[{"name":"workspacebundle"},{"name":"workspaceimage"}],"description":"Grants permission to update the WorkSpace images used in WorkSpace bundles","accessLevel":"Write","resourceTypes":[{"name":"workspacebundle","required":true},{"name":"workspaceimage","required":true}]},"UpdateWorkspaceImagePermission":{"conditionKeys":[],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to share or unshare WorkSpace images with other accounts by specifying whether other accounts have permission to copy the image","accessLevel":"Permissions management","resourceTypes":[{"name":"workspaceimage","required":true}]},"UpdateWorkspacesPool":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to update the WorkSpaces pool","accessLevel":"Write","resourceTypes":[{"name":"workspacespoolid","required":true}]}},"resources":[{"name":"certificateid","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspacecertificate/${CertificateId}"],"conditionKeys":[]},{"name":"connectionalias","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:connectionalias/${ConnectionAliasId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"directoryid","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:directory/${DirectoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspaceapplication","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspaceapplication/${WorkSpaceApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspacebundle","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspacebundle/${BundleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspaceid","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspace/${WorkspaceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspaceimage","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/${ImageId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspaceipgroup","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspaceipgroup/${GroupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspacespoolid","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspacespool/${PoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"},"workspaces:userId":{"types":["String"],"description":"Filters access by the ID of the Workspaces user"}}}
+{"name":"workspaces","actions":{"AcceptAccountLinkInvitation":{"conditionKeys":[],"resources":[],"description":"Grants permission to accept invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_AcceptAccountLinkInvitation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-AcceptAccountLinkInvitation"},"AssociateConnectionAlias":{"conditionKeys":[],"resources":[{"name":"connectionalias"},{"name":"directoryid"}],"description":"Grants permission to associate connection aliases with directories","accessLevel":"Write","resourceTypes":[{"name":"connectionalias","required":true},{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_AssociateConnectionAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-AssociateConnectionAlias"},"AssociateIpGroups":{"conditionKeys":[],"resources":[{"name":"directoryid"},{"name":"workspaceipgroup"}],"description":"Grants permission to associate IP access control groups with directories","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspaceipgroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_AssociateIpGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-AssociateIpGroups"},"AssociateWorkspaceApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceapplication"},{"name":"workspaceid"}],"description":"Grants permission to associate a workspace application with a WorkSpace","accessLevel":"Write","resourceTypes":[{"name":"workspaceapplication","required":true},{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_AssociateWorkspaceApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-AssociateWorkspaceApplication"},"AuthorizeIpRules":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to add rules to IP access control groups","accessLevel":"Write","resourceTypes":[{"name":"workspaceipgroup","required":true}],"dependentActions":["workspaces:UpdateRulesOfIpGroup"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_AuthorizeIpRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-AuthorizeIpRules"},"CopyWorkspaceImage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to copy a WorkSpace image","accessLevel":"Write","resourceTypes":[{"name":"workspaceimage","required":true}],"dependentActions":["workspaces:DescribeWorkspaceImages"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CopyWorkspaceImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CopyWorkspaceImage"},"CreateAccountLinkInvitation":{"conditionKeys":[],"resources":[],"description":"Grants permission to invite other AWS accounts to share the same configuration for WorkSpaces BYOL","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateAccountLinkInvitation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateAccountLinkInvitation"},"CreateConnectClientAddIn":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to create an Amazon Connect client add-in within a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateConnectClientAddIn.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateConnectClientAddIn"},"CreateConnectionAlias":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create connection aliases for use with cross-Region redirection","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateConnectionAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateConnectionAlias"},"CreateIpGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create IP access control groups","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateIpGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateIpGroup"},"CreateRootClientCertificate":{"conditionKeys":[],"resources":[{"name":"certificateid"}],"description":"Grants permission to create a root client certificate","accessLevel":"Write","resourceTypes":[{"name":"certificateid","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/adminguide/wsp-console-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateRootClientCertificate"},"CreateStandbyWorkspaces":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"directoryid"},{"name":"workspaceid"}],"description":"Grants permission to create one or more Standby WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateStandbyWorkspaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateStandbyWorkspaces"},"CreateTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create tags for WorkSpaces resources","accessLevel":"Tagging","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateTags"},"CreateUpdatedWorkspaceImage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to create an updated WorkSpace image","accessLevel":"Write","resourceTypes":[{"name":"workspaceimage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateUpdatedWorkspaceImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateUpdatedWorkspaceImage"},"CreateWorkspaceBundle":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workspacebundle"},{"name":"workspaceimage"}],"description":"Grants permission to create a WorkSpace bundle","accessLevel":"Write","resourceTypes":[{"name":"workspacebundle","required":true},{"name":"workspaceimage","required":true}],"dependentActions":["workspaces:CreateTags"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateWorkspaceBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateWorkspaceBundle"},"CreateWorkspaceImage":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workspaceid"}],"description":"Grants permission to create a new WorkSpace image","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateWorkspaceImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateWorkspaceImage"},"CreateWorkspaces":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"directoryid"},{"name":"workspacebundle"},{"name":"workspaceid"}],"description":"Grants permission to create one or more WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspacebundle","required":true},{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateWorkspaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateWorkspaces"},"CreateWorkspacesPool":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"directoryid"},{"name":"workspacebundle"},{"name":"workspacespoolid"}],"description":"Grants permission to create a WorkSpaces Pool","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspacebundle","required":true},{"name":"workspacespoolid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateWorkspacesPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-CreateWorkspacesPool"},"DeleteAccountLinkInvitation":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete invitations to other AWS accounts to share the same configuration for WorkSpaces BYOL","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteAccountLinkInvitation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeleteAccountLinkInvitation"},"DeleteClientBranding":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to delete AWS WorkSpaces Client branding data within a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteClientBranding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeleteClientBranding"},"DeleteConnectClientAddIn":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to delete an Amazon Connect client add-in that is configured within a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteConnectClientAddIn.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeleteConnectClientAddIn"},"DeleteConnectionAlias":{"conditionKeys":[],"resources":[{"name":"connectionalias"}],"description":"Grants permission to delete connection aliases","accessLevel":"Write","resourceTypes":[{"name":"connectionalias","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteConnectionAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeleteConnectionAlias"},"DeleteIpGroup":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to delete IP access control groups","accessLevel":"Write","resourceTypes":[{"name":"workspaceipgroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteIpGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeleteIpGroup"},"DeleteRootClientCertificate":{"conditionKeys":[],"resources":[{"name":"certificateid"}],"description":"Grants permission to delete root client certificate","accessLevel":"Write","resourceTypes":[{"name":"certificateid","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/adminguide/wsp-console-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeleteRootClientCertificate"},"DeleteTags":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to delete tags from WorkSpaces resources","accessLevel":"Tagging","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeleteTags"},"DeleteWorkspaceBundle":{"conditionKeys":[],"resources":[{"name":"workspacebundle"}],"description":"Grants permission to delete WorkSpace bundles","accessLevel":"Write","resourceTypes":[{"name":"workspacebundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteWorkspaceBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeleteWorkspaceBundle"},"DeleteWorkspaceImage":{"conditionKeys":[],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to delete WorkSpace images","accessLevel":"Write","resourceTypes":[{"name":"workspaceimage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteWorkspaceImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeleteWorkspaceImage"},"DeployWorkspaceApplications":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceid"}],"description":"Grants permission to deploy all pending workspace applications on a WorkSpace","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeployWorkspaceApplications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeployWorkspaceApplications"},"DeregisterWorkspaceDirectory":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to deregister directories from use with Amazon WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeregisterWorkspaceDirectory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DeregisterWorkspaceDirectory"},"DescribeAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeAccount.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeAccount"},"DescribeAccountModifications":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve modifications to the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeAccountModifications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeAccountModifications"},"DescribeApplicationAssociations":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceapplication"}],"description":"Grants permission to retrieve information about resources associated with a WorkSpace application","accessLevel":"List","resourceTypes":[{"name":"workspaceapplication","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeApplicationAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeApplicationAssociations"},"DescribeApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain information about WorkSpace applications","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeApplications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeApplications"},"DescribeBundleAssociations":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspacebundle"}],"description":"Grants permission to retrieve information about resources associated with a WorkSpace bundle","accessLevel":"List","resourceTypes":[{"name":"workspacebundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeBundleAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeBundleAssociations"},"DescribeClientBranding":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to retrieve AWS WorkSpaces Client branding data within a directory","accessLevel":"Read","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeClientBranding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeClientBranding"},"DescribeClientProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to retrieve information about WorkSpaces clients","accessLevel":"List","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeClientProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeClientProperties"},"DescribeConnectClientAddIns":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to retrieve a list of Amazon Connect client add-ins that have been created","accessLevel":"List","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeConnectClientAddIns.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeConnectClientAddIns"},"DescribeConnectionAliasPermissions":{"conditionKeys":[],"resources":[{"name":"connectionalias"}],"description":"Grants permission to retrieve the permissions that the owners of connection aliases have granted to other AWS accounts for connection aliases","accessLevel":"Read","resourceTypes":[{"name":"connectionalias","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeConnectionAliasPermissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeConnectionAliasPermissions"},"DescribeConnectionAliases":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list that describes the connection aliases used for cross-Region redirection","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeConnectionAliases.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeConnectionAliases"},"DescribeConsent":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about consent agreement to BYOL minimum requirements","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/adminguide/wsp-console-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeConsent"},"DescribeCustomWorkspaceImageImport":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about WorkSpace BYOL image import task","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeCustomWorkspaceImageImport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeCustomWorkspaceImageImport"},"DescribeImageAssociations":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to retrieve information about resources associated with a WorkSpace image","accessLevel":"List","resourceTypes":[{"name":"workspaceimage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeImageAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeImageAssociations"},"DescribeIpGroups":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to retrieve information about IP access control groups","accessLevel":"Read","resourceTypes":[{"name":"workspaceipgroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeIpGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeIpGroups"},"DescribeTags":{"conditionKeys":[],"resources":[],"description":"Grants permission to describe the tags for WorkSpaces resources","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeTags.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeTags"},"DescribeWorkspaceAssociations":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceid"}],"description":"Grants permission to retrieve information about resources associated with a WorkSpace","accessLevel":"List","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspaceAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspaceAssociations"},"DescribeWorkspaceBundles":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain information about WorkSpace bundles","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspaceBundles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspaceBundles"},"DescribeWorkspaceDirectories":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about directories that are registered with WorkSpaces","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspaceDirectories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspaceDirectories"},"DescribeWorkspaceImagePermissions":{"conditionKeys":[],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to retrieve information about WorkSpace image permissions","accessLevel":"Read","resourceTypes":[{"name":"workspaceimage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspaceImagePermissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspaceImagePermissions"},"DescribeWorkspaceImages":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about WorkSpace images","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspaceImages.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspaceImages"},"DescribeWorkspaceSnapshots":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to retrieve information about WorkSpace snapshots","accessLevel":"List","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspaceSnapshots.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspaceSnapshots"},"DescribeWorkspaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain information about WorkSpaces","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspaces"},"DescribeWorkspacesConnectionStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to obtain the connection status of WorkSpaces","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspacesConnectionStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspacesConnectionStatus"},"DescribeWorkspacesPoolSessions":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to retrieve information about the sessions of a WorkSpaces Pool","accessLevel":"List","resourceTypes":[{"name":"workspacespoolid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspacesPoolSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspacesPoolSessions"},"DescribeWorkspacesPools":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about WorkSpaces Pools","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DescribeWorkspacesPools.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DescribeWorkspacesPools"},"DirectoryAccessManagement":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to directory management actions while managing and provisioning workspaces","accessLevel":"List","resourceTypes":[{"name":"directoryid","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/adminguide/wsp-console-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DirectoryAccessManagement"},"DisassociateConnectionAlias":{"conditionKeys":[],"resources":[{"name":"connectionalias"}],"description":"Grants permission to disassociate connection aliases from directories","accessLevel":"Write","resourceTypes":[{"name":"connectionalias","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DisassociateConnectionAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DisassociateConnectionAlias"},"DisassociateIpGroups":{"conditionKeys":[],"resources":[{"name":"directoryid"},{"name":"workspaceipgroup"}],"description":"Grants permission to disassociate IP access control groups from directories","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true},{"name":"workspaceipgroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DisassociateIpGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DisassociateIpGroups"},"DisassociateWorkspaceApplication":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"workspaceapplication"},{"name":"workspaceid"}],"description":"Grants permission to disassociate a workspace application from a WorkSpace","accessLevel":"Write","resourceTypes":[{"name":"workspaceapplication","required":true},{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DisassociateWorkspaceApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-DisassociateWorkspaceApplication"},"GetAccountLink":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a link with another AWS Account for sharing configuration for WorkSpaces BYOL","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_GetAccountLink.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-GetAccountLink"},"ImportClientBranding":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to import AWS WorkSpaces Client branding data within a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ImportClientBranding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ImportClientBranding"},"ImportCustomWorkspaceImage":{"conditionKeys":[],"resources":[],"description":"Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ImportCustomWorkspaceImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ImportCustomWorkspaceImage"},"ImportWorkspaceImage":{"conditionKeys":[],"resources":[],"description":"Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:DescribeImages","ec2:ModifyImageAttribute"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ImportWorkspaceImage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ImportWorkspaceImage"},"ListAccountLinks":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve links with the AWS Account(s) that share your configuration for WorkSpaces BYOL","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListAccountLinks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ListAccountLinks"},"ListAvailableManagementCidrRanges":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the available CIDR ranges for enabling Bring Your Own License (BYOL) for WorkSpaces accounts","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListAvailableManagementCidrRanges.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ListAvailableManagementCidrRanges"},"MigrateWorkspace":{"conditionKeys":[],"resources":[{"name":"workspacebundle"},{"name":"workspaceid"}],"description":"Grants permission to migrate WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspacebundle","required":true},{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_MigrateWorkspace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-MigrateWorkspace"},"ModifyAccount":{"conditionKeys":[],"resources":[],"description":"Grants permission to modify the configuration of Bring Your Own License (BYOL) for WorkSpaces accounts","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifyAccount.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifyAccount"},"ModifyCertificateBasedAuthProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the certificate-based authorization properties of a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifyCertificateBasedAuthProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifyCertificateBasedAuthProperties"},"ModifyClientProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the properties of WorkSpaces clients","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifyClientProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifyClientProperties"},"ModifyEndpointEncryptionMode":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to configure the specified directory between Standard TLS and FIPS 140-2 validated mode","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifyEndpointEncryptionMode.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifyEndpointEncryptionMode"},"ModifySamlProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the SAML properties of a directory","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifySamlProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifySamlProperties"},"ModifySelfservicePermissions":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the self-service WorkSpace management capabilities for your users","accessLevel":"Permissions management","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifySelfservicePermissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifySelfservicePermissions"},"ModifyStreamingProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the streaming properties","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifyStreamingProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifyStreamingProperties"},"ModifyWorkspaceAccessProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to specify which devices and operating systems users can use to access their WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifyWorkspaceAccessProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifyWorkspaceAccessProperties"},"ModifyWorkspaceCreationProperties":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to modify the default properties used to create WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifyWorkspaceCreationProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifyWorkspaceCreationProperties"},"ModifyWorkspaceProperties":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to modify WorkSpace properties, including the running mode and the AutoStop period","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifyWorkspaceProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifyWorkspaceProperties"},"ModifyWorkspaceState":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to modify the state of WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ModifyWorkspaceState.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-ModifyWorkspaceState"},"RebootWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to reboot WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_RebootWorkspaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-RebootWorkspaces"},"RebuildWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to rebuild WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_RebuildWorkspaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-RebuildWorkspaces"},"RegisterWorkspaceDirectory":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"directoryid"}],"description":"Grants permission to register directories for use with Amazon WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_RegisterWorkspaceDirectory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-RegisterWorkspaceDirectory"},"RejectAccountLinkInvitation":{"conditionKeys":[],"resources":[],"description":"Grants permission to reject invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_RejectAccountLinkInvitation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-RejectAccountLinkInvitation"},"RestoreWorkspace":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to restore WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_RestoreWorkspace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-RestoreWorkspace"},"RevokeIpRules":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to remove rules from IP access control groups","accessLevel":"Write","resourceTypes":[{"name":"workspaceipgroup","required":true}],"dependentActions":["workspaces:UpdateRulesOfIpGroup"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_RevokeIpRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-RevokeIpRules"},"StartWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to start AutoStop WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_StartWorkspaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-StartWorkspaces"},"StartWorkspacesPool":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to start a WorkSpaces Pool","accessLevel":"Write","resourceTypes":[{"name":"workspacespoolid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_StartWorkspacesPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-StartWorkspacesPool"},"StopWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to stop AutoStop WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_StopWorkspaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-StopWorkspaces"},"StopWorkspacesPool":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to stop a WorkSpaces Pool","accessLevel":"Write","resourceTypes":[{"name":"workspacespoolid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_StopWorkspacesPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-StopWorkspacesPool"},"Stream":{"conditionKeys":["workspaces:userId"],"resources":[{"name":"directoryid"}],"description":"Grants permission to federated users to sign in by using their existing credentials and stream their workspace","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_Stream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-Stream"},"TerminateWorkspaces":{"conditionKeys":[],"resources":[{"name":"workspaceid"}],"description":"Grants permission to terminate WorkSpaces","accessLevel":"Write","resourceTypes":[{"name":"workspaceid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_TerminateWorkspaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-TerminateWorkspaces"},"TerminateWorkspacesPool":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to terminate a WorkSpaces Pool","accessLevel":"Write","resourceTypes":[{"name":"workspacespoolid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_TerminateWorkspacesPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-TerminateWorkspacesPool"},"TerminateWorkspacesPoolSession":{"conditionKeys":[],"resources":[],"description":"Grants permission to terminate a WorkSpaces Pool session","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_TerminateWorkspacesPoolSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-TerminateWorkspacesPoolSession"},"UpdateConnectClientAddIn":{"conditionKeys":[],"resources":[{"name":"directoryid"}],"description":"Grants permission to update an Amazon Connect client add-in. Use this action to update the name and endpoint URL of an Amazon Connect client add-in","accessLevel":"Write","resourceTypes":[{"name":"directoryid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_UpdateConnectClientAddIn.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-UpdateConnectClientAddIn"},"UpdateConnectionAliasPermission":{"conditionKeys":[],"resources":[{"name":"connectionalias"}],"description":"Grants permission to share or unshare connection aliases with other accounts","accessLevel":"Permissions management","resourceTypes":[{"name":"connectionalias","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_UpdateConnectionAliasPermission.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-UpdateConnectionAliasPermission"},"UpdateConsent":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the consent agreement to BYOL minimum requirements","accessLevel":"Write","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/adminguide/wsp-console-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-UpdateConsent"},"UpdateRootClientCertificate":{"conditionKeys":[],"resources":[{"name":"certificateid"}],"description":"Grants permission to update a root client certificate","accessLevel":"Write","resourceTypes":[{"name":"certificateid","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/adminguide/wsp-console-permissions-ref.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-UpdateRootClientCertificate"},"UpdateRulesOfIpGroup":{"conditionKeys":[],"resources":[{"name":"workspaceipgroup"}],"description":"Grants permission to replace rules for IP access control groups","accessLevel":"Write","resourceTypes":[{"name":"workspaceipgroup","required":true}],"dependentActions":["workspaces:AuthorizeIpRules","workspaces:RevokeIpRules"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_UpdateRulesOfIpGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-UpdateRulesOfIpGroup"},"UpdateWorkspaceBundle":{"conditionKeys":[],"resources":[{"name":"workspacebundle"},{"name":"workspaceimage"}],"description":"Grants permission to update the WorkSpace images used in WorkSpace bundles","accessLevel":"Write","resourceTypes":[{"name":"workspacebundle","required":true},{"name":"workspaceimage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_UpdateWorkspaceBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-UpdateWorkspaceBundle"},"UpdateWorkspaceImagePermission":{"conditionKeys":[],"resources":[{"name":"workspaceimage"}],"description":"Grants permission to share or unshare WorkSpace images with other accounts by specifying whether other accounts have permission to copy the image","accessLevel":"Permissions management","resourceTypes":[{"name":"workspaceimage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_UpdateWorkspaceImagePermission.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-UpdateWorkspaceImagePermission"},"UpdateWorkspacesPool":{"conditionKeys":[],"resources":[{"name":"workspacespoolid"}],"description":"Grants permission to update the WorkSpaces pool","accessLevel":"Write","resourceTypes":[{"name":"workspacespoolid","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_UpdateWorkspacesPool.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html#amazonworkspaces-UpdateWorkspacesPool"}},"resources":[{"name":"certificateid","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspacecertificate/${CertificateId}"],"conditionKeys":[]},{"name":"connectionalias","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:connectionalias/${ConnectionAliasId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"directoryid","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:directory/${DirectoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspaceapplication","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspaceapplication/${WorkSpaceApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspacebundle","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspacebundle/${BundleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspaceid","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspace/${WorkspaceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspaceimage","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/${ImageId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspaceipgroup","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspaceipgroup/${GroupId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workspacespoolid","arnFormats":["arn:${Partition}:workspaces:${Region}:${Account}:workspacespool/${PoolId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"},"workspaces:userId":{"types":["String"],"description":"Filters access by the ID of the Workspaces user"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspaces.html"}