aws-iam-language-server 0.0.8 → 0.0.10

package/src/data/servicereference/services/vpc-lattice.json

@@ -1 +1 @@
-{"name":"vpc-lattice","actions":{"AssociateViaAWSService":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a resource configuration through any AWS service managed networks","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"AssociateViaAWSService-EventsAndStates":{"conditionKeys":[],"resources":[],"description":"Grants permission to associate a resource configuration through Amazon EventBridge and AWS Step Functions service networks","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"CreateAccessLogSubscription":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction"],"resources":[{"name":"AccessLogSubscription"},{"name":"ResourceConfiguration"},{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to create an access log subscription","accessLevel":"Write","resourceTypes":[{"name":"AccessLogSubscription","required":true},{"name":"ResourceConfiguration","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}],"dependentActions":["logs:CreateLogDelivery","logs:GetLogDelivery"]},"CreateListener":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:Protocol","vpc-lattice:TargetGroupArns"],"resources":[{"name":"Listener"}],"description":"Grants permission to create a listener","accessLevel":"Write","resourceTypes":[{"name":"Listener","required":true}]},"CreateResourceConfiguration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction"],"resources":[{"name":"DomainVerification"},{"name":"ResourceConfiguration"},{"name":"ResourceGateway"}],"description":"Grants permission to create a resource configuration","accessLevel":"Write","resourceTypes":[{"name":"DomainVerification","required":false},{"name":"ResourceConfiguration","required":false},{"name":"ResourceGateway","required":false}]},"CreateResourceGateway":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:VpcId"],"resources":[{"name":"ResourceGateway"}],"description":"Grants permission to create a resource gateway","accessLevel":"Write","resourceTypes":[{"name":"ResourceGateway","required":true}],"dependentActions":["ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:DescribeVpcs"]},"CreateRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:TargetGroupArns"],"resources":[{"name":"Rule"}],"description":"Grants permission to create a rule","accessLevel":"Write","resourceTypes":[{"name":"Rule","required":true}]},"CreateService":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:AuthType","vpc-lattice:CreateAction"],"resources":[{"name":"Service"}],"description":"Grants permission to create a service","accessLevel":"Write","resourceTypes":[{"name":"Service","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateServiceNetwork":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:AuthType","vpc-lattice:CreateAction"],"resources":[{"name":"ServiceNetwork"}],"description":"Grants permission to create a service network","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetwork","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"CreateServiceNetworkResourceAssociation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:ResourceConfigurationArn","vpc-lattice:ServiceNetworkArn"],"resources":[{"name":"ResourceConfiguration"},{"name":"ServiceNetwork"},{"name":"ServiceNetworkResourceAssociation"}],"description":"Grants permission to create an association between a service network and a resource","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":true},{"name":"ServiceNetwork","required":true},{"name":"ServiceNetworkResourceAssociation","required":true}]},"CreateServiceNetworkServiceAssociation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"],"resources":[{"name":"Service"},{"name":"ServiceNetwork"},{"name":"ServiceNetworkServiceAssociation"}],"description":"Grants permission to create a service network and service association","accessLevel":"Write","resourceTypes":[{"name":"Service","required":true},{"name":"ServiceNetwork","required":true},{"name":"ServiceNetworkServiceAssociation","required":true}]},"CreateServiceNetworkVpcAssociation":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:PrivateDnsPreference","vpc-lattice:PrivateDnsSpecifiedDomains","vpc-lattice:SecurityGroupIds","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[{"name":"ServiceNetwork"},{"name":"ServiceNetworkVpcAssociation"}],"description":"Grants permission to create a service network and VPC association","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetwork","required":true},{"name":"ServiceNetworkVpcAssociation","required":true}],"dependentActions":["ec2:DescribeVpcs"]},"CreateServiceNetworkVpcEndpointAssociation":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an association between a service network and VPC endpoint","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true},"CreateTargetGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:VpcId"],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to create a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"DeleteAccessLogSubscription":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"AccessLogSubscription"}],"description":"Grants permission to delete an access log subscription","accessLevel":"Write","resourceTypes":[{"name":"AccessLogSubscription","required":true}],"dependentActions":["logs:DeleteLogDelivery","logs:GetLogDelivery"]},"DeleteAuthPolicy":{"conditionKeys":[],"resources":[{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to delete an auth policy","accessLevel":"Permissions management","resourceTypes":[{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}]},"DeleteDomainVerification":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"DomainVerification"}],"description":"Grants permission to delete a domain verification","accessLevel":"Write","resourceTypes":[{"name":"DomainVerification","required":true}]},"DeleteListener":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Listener"}],"description":"Grants permission to delete a listener","accessLevel":"Write","resourceTypes":[{"name":"Listener","required":true}]},"DeleteResourceConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceConfiguration"}],"description":"Grants permission to delete a resource configuration","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":true}]},"DeleteResourceEndpointAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceEndpointAssociation"}],"description":"Grants permission to delete a resource endpoint association","accessLevel":"Write","resourceTypes":[{"name":"ResourceEndpointAssociation","required":true}]},"DeleteResourceGateway":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceGateway"}],"description":"Grants permission to delete a resource gateway","accessLevel":"Write","resourceTypes":[{"name":"ResourceGateway","required":true}]},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"ResourceConfiguration"},{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to delete a resource policy","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}]},"DeleteRule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Rule"}],"description":"Grants permission to delete a rule","accessLevel":"Write","resourceTypes":[{"name":"Rule","required":true}]},"DeleteService":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Service"}],"description":"Grants permission to delete a service","accessLevel":"Write","resourceTypes":[{"name":"Service","required":true}]},"DeleteServiceNetwork":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ServiceNetwork"}],"description":"Grants permission to delete a service network","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetwork","required":true}]},"DeleteServiceNetworkResourceAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ServiceNetworkResourceAssociation"}],"description":"Grants permission to delete the association between a service network and resource","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetworkResourceAssociation","required":true}]},"DeleteServiceNetworkServiceAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"],"resources":[{"name":"ServiceNetworkServiceAssociation"}],"description":"Grants permission to delete a service network service association","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetworkServiceAssociation","required":true}]},"DeleteServiceNetworkVpcAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[{"name":"ServiceNetworkVpcAssociation"}],"description":"Grants permission to delete a service network and VPC association","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetworkVpcAssociation","required":true}]},"DeleteTargetGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to delete a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}]},"DeregisterTargets":{"conditionKeys":[],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to deregister targets from a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}]},"GetAccessLogSubscription":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"AccessLogSubscription"}],"description":"Grants permission to get information about an access log subscription","accessLevel":"Read","resourceTypes":[{"name":"AccessLogSubscription","required":true}],"dependentActions":["logs:GetLogDelivery"]},"GetAuthPolicy":{"conditionKeys":[],"resources":[{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to get information about an auth policy","accessLevel":"Read","resourceTypes":[{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}]},"GetDomainVerification":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"DomainVerification"}],"description":"Grants permission to get information about a domain verification","accessLevel":"Read","resourceTypes":[{"name":"DomainVerification","required":true}]},"GetListener":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Listener"}],"description":"Grants permission to get information about a listener","accessLevel":"Read","resourceTypes":[{"name":"Listener","required":true}]},"GetResourceConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceConfiguration"}],"description":"Grants permission to get information about a resource configuration","accessLevel":"Read","resourceTypes":[{"name":"ResourceConfiguration","required":true}]},"GetResourceGateway":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceGateway"}],"description":"Grants permission to get information about a resource gateway","accessLevel":"Read","resourceTypes":[{"name":"ResourceGateway","required":true}]},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"ResourceConfiguration"},{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to get information about a resource policy","accessLevel":"Read","resourceTypes":[{"name":"ResourceConfiguration","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}]},"GetRule":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Rule"}],"description":"Grants permission to get information about a rule","accessLevel":"Read","resourceTypes":[{"name":"Rule","required":true}]},"GetService":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Service"}],"description":"Grants permission to get information about a service","accessLevel":"Read","resourceTypes":[{"name":"Service","required":true}]},"GetServiceNetwork":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ServiceNetwork"}],"description":"Grants permission to get information about a service network","accessLevel":"Read","resourceTypes":[{"name":"ServiceNetwork","required":true}]},"GetServiceNetworkResourceAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ServiceNetworkResourceAssociation"}],"description":"Grants permission to get information about an association between a service network and resource configuration","accessLevel":"Read","resourceTypes":[{"name":"ServiceNetworkResourceAssociation","required":true}]},"GetServiceNetworkServiceAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"],"resources":[{"name":"ServiceNetworkServiceAssociation"}],"description":"Grants permission to get information about a service network and service association","accessLevel":"Read","resourceTypes":[{"name":"ServiceNetworkServiceAssociation","required":true}]},"GetServiceNetworkVpcAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[{"name":"ServiceNetworkVpcAssociation"}],"description":"Grants permission to get information about a service network and VPC association","accessLevel":"Read","resourceTypes":[{"name":"ServiceNetworkVpcAssociation","required":true}]},"GetTargetGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to get information about a target group","accessLevel":"Read","resourceTypes":[{"name":"TargetGroup","required":true}]},"ListAccessLogSubscriptions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list some or all access log subscriptions about a service network or a service","accessLevel":"List","resourceTypes":[]},"ListDomainVerifications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list some or all domain verifications","accessLevel":"List","resourceTypes":[]},"ListListeners":{"conditionKeys":[],"resources":[],"description":"Grants permission to list some or all listeners","accessLevel":"List","resourceTypes":[]},"ListResourceConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list some or all resource configurations","accessLevel":"List","resourceTypes":[]},"ListResourceEndpointAssociations":{"conditionKeys":["vpc-lattice:ResourceConfigurationArn","vpc-lattice:VpcEndpointId"],"resources":[],"description":"Grants permission to list some or all associations between a resource configuration and VPC endpoint","accessLevel":"List","resourceTypes":[]},"ListResourceGateways":{"conditionKeys":[],"resources":[],"description":"Grants permission to list some or all resource gateways","accessLevel":"List","resourceTypes":[]},"ListRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to list some or all rules","accessLevel":"List","resourceTypes":[]},"ListServiceNetworkResourceAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list some or all associations between a service network and resource configuration","accessLevel":"List","resourceTypes":[]},"ListServiceNetworkServiceAssociations":{"conditionKeys":["vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"],"resources":[],"description":"Grants permission to list some or all service network and service associations","accessLevel":"List","resourceTypes":[]},"ListServiceNetworkVpcAssociations":{"conditionKeys":["vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[],"description":"Grants permission to list some or all service network and VPC associations","accessLevel":"List","resourceTypes":[]},"ListServiceNetworkVpcEndpointAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list some or all associations between a service network and VPC endpoint","accessLevel":"List","resourceTypes":[]},"ListServiceNetworks":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the service networks owned by a caller account or shared with the caller account","accessLevel":"List","resourceTypes":[]},"ListServices":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the services owned by a caller account or shared with the caller account","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[],"description":"Grants permission to list tags for a vpc-lattice resource","accessLevel":"Read","resourceTypes":[]},"ListTargetGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to list some or all target groups","accessLevel":"List","resourceTypes":[]},"ListTargets":{"conditionKeys":[],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to list some or all targets in a target group","accessLevel":"List","resourceTypes":[{"name":"TargetGroup","required":true}]},"PutAuthPolicy":{"conditionKeys":[],"resources":[{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to create or update the auth policy for a service network or a service","accessLevel":"Permissions management","resourceTypes":[{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}]},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"ResourceConfiguration"},{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to create a resource policy for a resource configuration, service, or service network","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}]},"RegisterTargets":{"conditionKeys":[],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to register targets to a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}]},"StartDomainVerification":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:DomainName"],"resources":[{"name":"DomainVerification"}],"description":"Grants permission to start a domain verification","accessLevel":"Write","resourceTypes":[{"name":"DomainVerification","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AccessLogSubscription"},{"name":"DomainVerification"},{"name":"Listener"},{"name":"ResourceConfiguration"},{"name":"ResourceEndpointAssociation"},{"name":"ResourceGateway"},{"name":"Rule"},{"name":"Service"},{"name":"ServiceNetwork"},{"name":"ServiceNetworkResourceAssociation"},{"name":"ServiceNetworkServiceAssociation"},{"name":"ServiceNetworkVpcAssociation"},{"name":"TargetGroup"}],"description":"Grants permission to tag a vpc-lattice resource","accessLevel":"Tagging","resourceTypes":[{"name":"AccessLogSubscription","required":false},{"name":"DomainVerification","required":false},{"name":"Listener","required":false},{"name":"ResourceConfiguration","required":false},{"name":"ResourceEndpointAssociation","required":false},{"name":"ResourceGateway","required":false},{"name":"Rule","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false},{"name":"ServiceNetworkResourceAssociation","required":false},{"name":"ServiceNetworkServiceAssociation","required":false},{"name":"ServiceNetworkVpcAssociation","required":false},{"name":"TargetGroup","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"AccessLogSubscription"},{"name":"DomainVerification"},{"name":"Listener"},{"name":"ResourceConfiguration"},{"name":"ResourceEndpointAssociation"},{"name":"ResourceGateway"},{"name":"Rule"},{"name":"Service"},{"name":"ServiceNetwork"},{"name":"ServiceNetworkResourceAssociation"},{"name":"ServiceNetworkServiceAssociation"},{"name":"ServiceNetworkVpcAssociation"},{"name":"TargetGroup"}],"description":"Grants permission to untag a vpc-lattice resource","accessLevel":"Tagging","resourceTypes":[{"name":"AccessLogSubscription","required":false},{"name":"DomainVerification","required":false},{"name":"Listener","required":false},{"name":"ResourceConfiguration","required":false},{"name":"ResourceEndpointAssociation","required":false},{"name":"ResourceGateway","required":false},{"name":"Rule","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false},{"name":"ServiceNetworkResourceAssociation","required":false},{"name":"ServiceNetworkServiceAssociation","required":false},{"name":"ServiceNetworkVpcAssociation","required":false},{"name":"TargetGroup","required":false}]},"UpdateAccessLogSubscription":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"AccessLogSubscription"}],"description":"Grants permission to update an access log subscription","accessLevel":"Write","resourceTypes":[{"name":"AccessLogSubscription","required":true}],"dependentActions":["logs:GetLogDelivery","logs:UpdateLogDelivery"]},"UpdateListener":{"conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:TargetGroupArns"],"resources":[{"name":"Listener"}],"description":"Grants permission to update a listener","accessLevel":"Write","resourceTypes":[{"name":"Listener","required":true}]},"UpdateResourceConfiguration":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceConfiguration"}],"description":"Grants permission to update a resource configuration","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":true}]},"UpdateResourceGateway":{"conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:SecurityGroupIds"],"resources":[{"name":"ResourceGateway"}],"description":"Grants permission to update a resource gateway","accessLevel":"Write","resourceTypes":[{"name":"ResourceGateway","required":true}]},"UpdateRule":{"conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:TargetGroupArns"],"resources":[{"name":"Rule"}],"description":"Grants permission to update a rule","accessLevel":"Write","resourceTypes":[{"name":"Rule","required":true}]},"UpdateService":{"conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:AuthType"],"resources":[{"name":"Service"}],"description":"Grants permission to update a service","accessLevel":"Write","resourceTypes":[{"name":"Service","required":true}]},"UpdateServiceNetwork":{"conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:AuthType"],"resources":[{"name":"ServiceNetwork"}],"description":"Grants permission to update a service network","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetwork","required":true}]},"UpdateServiceNetworkVpcAssociation":{"conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:SecurityGroupIds","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[{"name":"ServiceNetworkVpcAssociation"}],"description":"Grants permission to update a service network and VPC association","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetworkVpcAssociation","required":true}],"dependentActions":["ec2:DescribeSecurityGroups","ec2:DescribeVpcs"]},"UpdateTargetGroup":{"conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to update a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}]}},"resources":[{"name":"AccessLogSubscription","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/${AccessLogSubscriptionId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction"]},{"name":"DomainVerification","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/${DomainVerificationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:DomainName"]},{"name":"Listener","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}/listener/${ListenerId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:Protocol","vpc-lattice:TargetGroupArns"]},{"name":"ResourceConfiguration","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/${ResourceConfigurationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction"]},{"name":"ResourceEndpointAssociation","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceendpointassociation/${ResourceEndpointAssociationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:ResourceConfigurationArn","vpc-lattice:VpcEndpointId"]},{"name":"ResourceGateway","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/${ResourceGatewayId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:VpcId"]},{"name":"Rule","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}/listener/${ListenerId}/rule/${RuleId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:TargetGroupArns"]},{"name":"Service","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:AuthType","vpc-lattice:CreateAction"]},{"name":"ServiceNetwork","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/${ServiceNetworkId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:AuthType","vpc-lattice:CreateAction"]},{"name":"ServiceNetworkResourceAssociation","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkresourceassociation/${ServiceNetworkResourceAssociationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:ResourceConfigurationArn","vpc-lattice:ServiceNetworkArn"]},{"name":"ServiceNetworkServiceAssociation","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkserviceassociation/${ServiceNetworkServiceAssociationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"]},{"name":"ServiceNetworkVpcAssociation","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkvpcassociation/${ServiceNetworkVpcAssociationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:PrivateDnsPreference","vpc-lattice:PrivateDnsSpecifiedDomains","vpc-lattice:SecurityGroupIds","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"]},{"name":"TargetGroup","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/${TargetGroupId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:VpcId"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"},"vpc-lattice:AuthType":{"types":["String"],"description":"Filters access by the auth type specified in the request"},"vpc-lattice:CreateAction":{"types":["String"],"description":"Filters access by the name of a resource-creating API action"},"vpc-lattice:DomainName":{"types":["String"],"description":"Filters access by the domain name"},"vpc-lattice:PrivateDnsPreference":{"types":["String"],"description":"Filters access by the private dns preference"},"vpc-lattice:PrivateDnsSpecifiedDomains":{"types":["ArrayOfString"],"description":"Filters access by the private dns domains"},"vpc-lattice:Protocol":{"types":["String"],"description":"Filters access by the protocol specified in the request"},"vpc-lattice:ResourceConfigurationArn":{"types":["ARN"],"description":"Filters access by the ARN of a resource configuration"},"vpc-lattice:SecurityGroupIds":{"types":["ArrayOfString"],"description":"Filters access by the IDs of security groups"},"vpc-lattice:ServiceArn":{"types":["ARN"],"description":"Filters access by the ARN of a service"},"vpc-lattice:ServiceNetworkArn":{"types":["ARN"],"description":"Filters access by the ARN of a service network"},"vpc-lattice:TargetGroupArns":{"types":["ArrayOfARN"],"description":"Filters access by the ARNs of target groups"},"vpc-lattice:VpcEndpointId":{"types":["String"],"description":"Filters access by the ID of a VPC endpoint"},"vpc-lattice:VpcId":{"types":["String"],"description":"Filters access by the ID of a virtual private cloud (VPC)"}}}
+{"name":"vpc-lattice","actions":{"AssociateViaAWSService":{"name":"AssociateViaAWSService","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to associate a resource configuration through any AWS service managed networks","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true,"operationUrl":"service-network-associations.html#service-network-resource-configuration","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-AssociateViaAWSService"},"AssociateViaAWSService-EventsAndStates":{"name":"AssociateViaAWSService-EventsAndStates","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to associate a resource configuration through Amazon EventBridge and AWS Step Functions service networks","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true,"operationUrl":"service-network-associations.html#service-network-resource-configuration","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-AssociateViaAWSService-EventsAndStates"},"CreateAccessLogSubscription":{"name":"CreateAccessLogSubscription","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction"],"resources":[{"name":"AccessLogSubscription"},{"name":"ResourceConfiguration"},{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to create an access log subscription","accessLevel":"Write","resourceTypes":[{"name":"AccessLogSubscription","required":true},{"name":"ResourceConfiguration","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}],"dependentActions":["logs:CreateLogDelivery","logs:GetLogDelivery"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateAccessLogSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateAccessLogSubscription"},"CreateListener":{"name":"CreateListener","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:Protocol","vpc-lattice:TargetGroupArns"],"resources":[{"name":"Listener"}],"description":"Grants permission to create a listener","accessLevel":"Write","resourceTypes":[{"name":"Listener","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateListener.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateListener"},"CreateResourceConfiguration":{"name":"CreateResourceConfiguration","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction"],"resources":[{"name":"DomainVerification"},{"name":"ResourceConfiguration"},{"name":"ResourceGateway"}],"description":"Grants permission to create a resource configuration","accessLevel":"Write","resourceTypes":[{"name":"DomainVerification","required":false},{"name":"ResourceConfiguration","required":false},{"name":"ResourceGateway","required":false}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateResourceConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateResourceConfiguration"},"CreateResourceGateway":{"name":"CreateResourceGateway","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:VpcId"],"resources":[{"name":"ResourceGateway"}],"description":"Grants permission to create a resource gateway","accessLevel":"Write","resourceTypes":[{"name":"ResourceGateway","required":true}],"dependentActions":["ec2:DescribeSecurityGroups","ec2:DescribeSubnets","ec2:DescribeVpcs"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateResourceGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateResourceGateway"},"CreateRule":{"name":"CreateRule","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:TargetGroupArns"],"resources":[{"name":"Rule"}],"description":"Grants permission to create a rule","accessLevel":"Write","resourceTypes":[{"name":"Rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateRule"},"CreateService":{"name":"CreateService","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:AuthType","vpc-lattice:CreateAction"],"resources":[{"name":"Service"}],"description":"Grants permission to create a service","accessLevel":"Write","resourceTypes":[{"name":"Service","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateService"},"CreateServiceNetwork":{"name":"CreateServiceNetwork","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:AuthType","vpc-lattice:CreateAction"],"resources":[{"name":"ServiceNetwork"}],"description":"Grants permission to create a service network","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetwork","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateServiceNetwork.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateServiceNetwork"},"CreateServiceNetworkResourceAssociation":{"name":"CreateServiceNetworkResourceAssociation","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:ResourceConfigurationArn","vpc-lattice:ServiceNetworkArn"],"resources":[{"name":"ResourceConfiguration"},{"name":"ServiceNetwork"},{"name":"ServiceNetworkResourceAssociation"}],"description":"Grants permission to create an association between a service network and a resource","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":true},{"name":"ServiceNetwork","required":true},{"name":"ServiceNetworkResourceAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateServiceNetworkResourceAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateServiceNetworkResourceAssociation"},"CreateServiceNetworkServiceAssociation":{"name":"CreateServiceNetworkServiceAssociation","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"],"resources":[{"name":"Service"},{"name":"ServiceNetwork"},{"name":"ServiceNetworkServiceAssociation"}],"description":"Grants permission to create a service network and service association","accessLevel":"Write","resourceTypes":[{"name":"Service","required":true},{"name":"ServiceNetwork","required":true},{"name":"ServiceNetworkServiceAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateServiceNetworkServiceAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateServiceNetworkServiceAssociation"},"CreateServiceNetworkVpcAssociation":{"name":"CreateServiceNetworkVpcAssociation","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:PrivateDnsPreference","vpc-lattice:PrivateDnsSpecifiedDomains","vpc-lattice:SecurityGroupIds","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[{"name":"ServiceNetwork"},{"name":"ServiceNetworkVpcAssociation"}],"description":"Grants permission to create a service network and VPC association","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetwork","required":true},{"name":"ServiceNetworkVpcAssociation","required":true}],"dependentActions":["ec2:DescribeVpcs"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateServiceNetworkVpcAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateServiceNetworkVpcAssociation"},"CreateServiceNetworkVpcEndpointAssociation":{"name":"CreateServiceNetworkVpcEndpointAssociation","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to create an association between a service network and VPC endpoint","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true,"operationUrl":"service-network-associations.html#service-network-vpc-endpoint","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateServiceNetworkVpcEndpointAssociation"},"CreateTargetGroup":{"name":"CreateTargetGroup","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:VpcId"],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to create a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_CreateTargetGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-CreateTargetGroup"},"DeleteAccessLogSubscription":{"name":"DeleteAccessLogSubscription","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"AccessLogSubscription"}],"description":"Grants permission to delete an access log subscription","accessLevel":"Write","resourceTypes":[{"name":"AccessLogSubscription","required":true}],"dependentActions":["logs:DeleteLogDelivery","logs:GetLogDelivery"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteAccessLogSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteAccessLogSubscription"},"DeleteAuthPolicy":{"name":"DeleteAuthPolicy","service":"vpc-lattice","conditionKeys":[],"resources":[{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to delete an auth policy","accessLevel":"Permissions management","resourceTypes":[{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteAuthPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteAuthPolicy"},"DeleteDomainVerification":{"name":"DeleteDomainVerification","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"DomainVerification"}],"description":"Grants permission to delete a domain verification","accessLevel":"Write","resourceTypes":[{"name":"DomainVerification","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteDomainVerification.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteDomainVerification"},"DeleteListener":{"name":"DeleteListener","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Listener"}],"description":"Grants permission to delete a listener","accessLevel":"Write","resourceTypes":[{"name":"Listener","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteListener.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteListener"},"DeleteResourceConfiguration":{"name":"DeleteResourceConfiguration","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceConfiguration"}],"description":"Grants permission to delete a resource configuration","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteResourceConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteResourceConfiguration"},"DeleteResourceEndpointAssociation":{"name":"DeleteResourceEndpointAssociation","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceEndpointAssociation"}],"description":"Grants permission to delete a resource endpoint association","accessLevel":"Write","resourceTypes":[{"name":"ResourceEndpointAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteResourceEndpointAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteResourceEndpointAssociation"},"DeleteResourceGateway":{"name":"DeleteResourceGateway","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceGateway"}],"description":"Grants permission to delete a resource gateway","accessLevel":"Write","resourceTypes":[{"name":"ResourceGateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteResourceGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteResourceGateway"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"vpc-lattice","conditionKeys":[],"resources":[{"name":"ResourceConfiguration"},{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to delete a resource policy","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteResourcePolicy"},"DeleteRule":{"name":"DeleteRule","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Rule"}],"description":"Grants permission to delete a rule","accessLevel":"Write","resourceTypes":[{"name":"Rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteRule"},"DeleteService":{"name":"DeleteService","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Service"}],"description":"Grants permission to delete a service","accessLevel":"Write","resourceTypes":[{"name":"Service","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteService"},"DeleteServiceNetwork":{"name":"DeleteServiceNetwork","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ServiceNetwork"}],"description":"Grants permission to delete a service network","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetwork","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteServiceNetwork.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteServiceNetwork"},"DeleteServiceNetworkResourceAssociation":{"name":"DeleteServiceNetworkResourceAssociation","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ServiceNetworkResourceAssociation"}],"description":"Grants permission to delete the association between a service network and resource","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetworkResourceAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteServiceNetworkResourceAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteServiceNetworkResourceAssociation"},"DeleteServiceNetworkServiceAssociation":{"name":"DeleteServiceNetworkServiceAssociation","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"],"resources":[{"name":"ServiceNetworkServiceAssociation"}],"description":"Grants permission to delete a service network service association","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetworkServiceAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteServiceNetworkServiceAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteServiceNetworkServiceAssociation"},"DeleteServiceNetworkVpcAssociation":{"name":"DeleteServiceNetworkVpcAssociation","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[{"name":"ServiceNetworkVpcAssociation"}],"description":"Grants permission to delete a service network and VPC association","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetworkVpcAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteServiceNetworkVpcAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteServiceNetworkVpcAssociation"},"DeleteTargetGroup":{"name":"DeleteTargetGroup","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to delete a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeleteTargetGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeleteTargetGroup"},"DeregisterTargets":{"name":"DeregisterTargets","service":"vpc-lattice","conditionKeys":[],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to deregister targets from a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_DeregisterTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-DeregisterTargets"},"GetAccessLogSubscription":{"name":"GetAccessLogSubscription","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"AccessLogSubscription"}],"description":"Grants permission to get information about an access log subscription","accessLevel":"Read","resourceTypes":[{"name":"AccessLogSubscription","required":true}],"dependentActions":["logs:GetLogDelivery"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetAccessLogSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetAccessLogSubscription"},"GetAuthPolicy":{"name":"GetAuthPolicy","service":"vpc-lattice","conditionKeys":[],"resources":[{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to get information about an auth policy","accessLevel":"Read","resourceTypes":[{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetAuthPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetAuthPolicy"},"GetDomainVerification":{"name":"GetDomainVerification","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"DomainVerification"}],"description":"Grants permission to get information about a domain verification","accessLevel":"Read","resourceTypes":[{"name":"DomainVerification","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetDomainVerification.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetDomainVerification"},"GetListener":{"name":"GetListener","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Listener"}],"description":"Grants permission to get information about a listener","accessLevel":"Read","resourceTypes":[{"name":"Listener","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetListener.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetListener"},"GetResourceConfiguration":{"name":"GetResourceConfiguration","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceConfiguration"}],"description":"Grants permission to get information about a resource configuration","accessLevel":"Read","resourceTypes":[{"name":"ResourceConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetResourceConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetResourceConfiguration"},"GetResourceGateway":{"name":"GetResourceGateway","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceGateway"}],"description":"Grants permission to get information about a resource gateway","accessLevel":"Read","resourceTypes":[{"name":"ResourceGateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetResourceGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetResourceGateway"},"GetResourcePolicy":{"name":"GetResourcePolicy","service":"vpc-lattice","conditionKeys":[],"resources":[{"name":"ResourceConfiguration"},{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to get information about a resource policy","accessLevel":"Read","resourceTypes":[{"name":"ResourceConfiguration","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetResourcePolicy"},"GetRule":{"name":"GetRule","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Rule"}],"description":"Grants permission to get information about a rule","accessLevel":"Read","resourceTypes":[{"name":"Rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetRule"},"GetService":{"name":"GetService","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"Service"}],"description":"Grants permission to get information about a service","accessLevel":"Read","resourceTypes":[{"name":"Service","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetService"},"GetServiceNetwork":{"name":"GetServiceNetwork","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ServiceNetwork"}],"description":"Grants permission to get information about a service network","accessLevel":"Read","resourceTypes":[{"name":"ServiceNetwork","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetServiceNetwork.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetServiceNetwork"},"GetServiceNetworkResourceAssociation":{"name":"GetServiceNetworkResourceAssociation","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ServiceNetworkResourceAssociation"}],"description":"Grants permission to get information about an association between a service network and resource configuration","accessLevel":"Read","resourceTypes":[{"name":"ServiceNetworkResourceAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetServiceNetworkResourceAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetServiceNetworkResourceAssociation"},"GetServiceNetworkServiceAssociation":{"name":"GetServiceNetworkServiceAssociation","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"],"resources":[{"name":"ServiceNetworkServiceAssociation"}],"description":"Grants permission to get information about a service network and service association","accessLevel":"Read","resourceTypes":[{"name":"ServiceNetworkServiceAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetServiceNetworkServiceAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetServiceNetworkServiceAssociation"},"GetServiceNetworkVpcAssociation":{"name":"GetServiceNetworkVpcAssociation","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[{"name":"ServiceNetworkVpcAssociation"}],"description":"Grants permission to get information about a service network and VPC association","accessLevel":"Read","resourceTypes":[{"name":"ServiceNetworkVpcAssociation","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetServiceNetworkVpcAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetServiceNetworkVpcAssociation"},"GetTargetGroup":{"name":"GetTargetGroup","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to get information about a target group","accessLevel":"Read","resourceTypes":[{"name":"TargetGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetTargetGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-GetTargetGroup"},"ListAccessLogSubscriptions":{"name":"ListAccessLogSubscriptions","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list some or all access log subscriptions about a service network or a service","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListAccessLogSubscriptions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListAccessLogSubscriptions"},"ListDomainVerifications":{"name":"ListDomainVerifications","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list some or all domain verifications","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListDomainVerifications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListDomainVerifications"},"ListListeners":{"name":"ListListeners","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list some or all listeners","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListListeners.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListListeners"},"ListResourceConfigurations":{"name":"ListResourceConfigurations","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list some or all resource configurations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListResourceConfigurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListResourceConfigurations"},"ListResourceEndpointAssociations":{"name":"ListResourceEndpointAssociations","service":"vpc-lattice","conditionKeys":["vpc-lattice:ResourceConfigurationArn","vpc-lattice:VpcEndpointId"],"resources":[],"description":"Grants permission to list some or all associations between a resource configuration and VPC endpoint","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListResourceEndpointAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListResourceEndpointAssociations"},"ListResourceGateways":{"name":"ListResourceGateways","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list some or all resource gateways","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListResourceGateways.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListResourceGateways"},"ListRules":{"name":"ListRules","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list some or all rules","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListRules"},"ListServiceNetworkResourceAssociations":{"name":"ListServiceNetworkResourceAssociations","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list some or all associations between a service network and resource configuration","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListServiceNetworkResourceAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListServiceNetworkResourceAssociations"},"ListServiceNetworkServiceAssociations":{"name":"ListServiceNetworkServiceAssociations","service":"vpc-lattice","conditionKeys":["vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"],"resources":[],"description":"Grants permission to list some or all service network and service associations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListServiceNetworkServiceAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListServiceNetworkServiceAssociations"},"ListServiceNetworkVpcAssociations":{"name":"ListServiceNetworkVpcAssociations","service":"vpc-lattice","conditionKeys":["vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[],"description":"Grants permission to list some or all service network and VPC associations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListServiceNetworkVpcAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListServiceNetworkVpcAssociations"},"ListServiceNetworkVpcEndpointAssociations":{"name":"ListServiceNetworkVpcEndpointAssociations","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list some or all associations between a service network and VPC endpoint","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListServiceNetworkVpcEndpointAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListServiceNetworkVpcEndpointAssociations"},"ListServiceNetworks":{"name":"ListServiceNetworks","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list the service networks owned by a caller account or shared with the caller account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListServiceNetworks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListServiceNetworks"},"ListServices":{"name":"ListServices","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list the services owned by a caller account or shared with the caller account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListServices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListServices"},"ListTagsForResource":{"name":"ListTagsForResource","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list tags for a vpc-lattice resource","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListTagsForResource"},"ListTargetGroups":{"name":"ListTargetGroups","service":"vpc-lattice","conditionKeys":[],"resources":[],"description":"Grants permission to list some or all target groups","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListTargetGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListTargetGroups"},"ListTargets":{"name":"ListTargets","service":"vpc-lattice","conditionKeys":[],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to list some or all targets in a target group","accessLevel":"List","resourceTypes":[{"name":"TargetGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_ListTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-ListTargets"},"PutAuthPolicy":{"name":"PutAuthPolicy","service":"vpc-lattice","conditionKeys":[],"resources":[{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to create or update the auth policy for a service network or a service","accessLevel":"Permissions management","resourceTypes":[{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_PutAuthPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-PutAuthPolicy"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"vpc-lattice","conditionKeys":[],"resources":[{"name":"ResourceConfiguration"},{"name":"Service"},{"name":"ServiceNetwork"}],"description":"Grants permission to create a resource policy for a resource configuration, service, or service network","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-PutResourcePolicy"},"RegisterTargets":{"name":"RegisterTargets","service":"vpc-lattice","conditionKeys":[],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to register targets to a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_RegisterTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-RegisterTargets"},"StartDomainVerification":{"name":"StartDomainVerification","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:DomainName"],"resources":[{"name":"DomainVerification"}],"description":"Grants permission to start a domain verification","accessLevel":"Write","resourceTypes":[{"name":"DomainVerification","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_StartDomainVerification.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-StartDomainVerification"},"TagResource":{"name":"TagResource","service":"vpc-lattice","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AccessLogSubscription"},{"name":"DomainVerification"},{"name":"Listener"},{"name":"ResourceConfiguration"},{"name":"ResourceEndpointAssociation"},{"name":"ResourceGateway"},{"name":"Rule"},{"name":"Service"},{"name":"ServiceNetwork"},{"name":"ServiceNetworkResourceAssociation"},{"name":"ServiceNetworkServiceAssociation"},{"name":"ServiceNetworkVpcAssociation"},{"name":"TargetGroup"}],"description":"Grants permission to tag a vpc-lattice resource","accessLevel":"Tagging","resourceTypes":[{"name":"AccessLogSubscription","required":false},{"name":"DomainVerification","required":false},{"name":"Listener","required":false},{"name":"ResourceConfiguration","required":false},{"name":"ResourceEndpointAssociation","required":false},{"name":"ResourceGateway","required":false},{"name":"Rule","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false},{"name":"ServiceNetworkResourceAssociation","required":false},{"name":"ServiceNetworkServiceAssociation","required":false},{"name":"ServiceNetworkVpcAssociation","required":false},{"name":"TargetGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-TagResource"},"UntagResource":{"name":"UntagResource","service":"vpc-lattice","conditionKeys":["aws:TagKeys"],"resources":[{"name":"AccessLogSubscription"},{"name":"DomainVerification"},{"name":"Listener"},{"name":"ResourceConfiguration"},{"name":"ResourceEndpointAssociation"},{"name":"ResourceGateway"},{"name":"Rule"},{"name":"Service"},{"name":"ServiceNetwork"},{"name":"ServiceNetworkResourceAssociation"},{"name":"ServiceNetworkServiceAssociation"},{"name":"ServiceNetworkVpcAssociation"},{"name":"TargetGroup"}],"description":"Grants permission to untag a vpc-lattice resource","accessLevel":"Tagging","resourceTypes":[{"name":"AccessLogSubscription","required":false},{"name":"DomainVerification","required":false},{"name":"Listener","required":false},{"name":"ResourceConfiguration","required":false},{"name":"ResourceEndpointAssociation","required":false},{"name":"ResourceGateway","required":false},{"name":"Rule","required":false},{"name":"Service","required":false},{"name":"ServiceNetwork","required":false},{"name":"ServiceNetworkResourceAssociation","required":false},{"name":"ServiceNetworkServiceAssociation","required":false},{"name":"ServiceNetworkVpcAssociation","required":false},{"name":"TargetGroup","required":false}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UntagResource"},"UpdateAccessLogSubscription":{"name":"UpdateAccessLogSubscription","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"AccessLogSubscription"}],"description":"Grants permission to update an access log subscription","accessLevel":"Write","resourceTypes":[{"name":"AccessLogSubscription","required":true}],"dependentActions":["logs:GetLogDelivery","logs:UpdateLogDelivery"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UpdateAccessLogSubscription.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UpdateAccessLogSubscription"},"UpdateListener":{"name":"UpdateListener","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:TargetGroupArns"],"resources":[{"name":"Listener"}],"description":"Grants permission to update a listener","accessLevel":"Write","resourceTypes":[{"name":"Listener","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UpdateListener.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UpdateListener"},"UpdateResourceConfiguration":{"name":"UpdateResourceConfiguration","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"ResourceConfiguration"}],"description":"Grants permission to update a resource configuration","accessLevel":"Write","resourceTypes":[{"name":"ResourceConfiguration","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UpdateResourceConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UpdateResourceConfiguration"},"UpdateResourceGateway":{"name":"UpdateResourceGateway","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:SecurityGroupIds"],"resources":[{"name":"ResourceGateway"}],"description":"Grants permission to update a resource gateway","accessLevel":"Write","resourceTypes":[{"name":"ResourceGateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UpdateResourceGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UpdateResourceGateway"},"UpdateRule":{"name":"UpdateRule","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:TargetGroupArns"],"resources":[{"name":"Rule"}],"description":"Grants permission to update a rule","accessLevel":"Write","resourceTypes":[{"name":"Rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UpdateRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UpdateRule"},"UpdateService":{"name":"UpdateService","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:AuthType"],"resources":[{"name":"Service"}],"description":"Grants permission to update a service","accessLevel":"Write","resourceTypes":[{"name":"Service","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UpdateService.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UpdateService"},"UpdateServiceNetwork":{"name":"UpdateServiceNetwork","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","vpc-lattice:AuthType"],"resources":[{"name":"ServiceNetwork"}],"description":"Grants permission to update a service network","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetwork","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UpdateServiceNetwork.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UpdateServiceNetwork"},"UpdateServiceNetworkVpcAssociation":{"name":"UpdateServiceNetworkVpcAssociation","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:SecurityGroupIds","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"],"resources":[{"name":"ServiceNetworkVpcAssociation"}],"description":"Grants permission to update a service network and VPC association","accessLevel":"Write","resourceTypes":[{"name":"ServiceNetworkVpcAssociation","required":true}],"dependentActions":["ec2:DescribeSecurityGroups","ec2:DescribeVpcs"],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UpdateServiceNetworkVpcAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UpdateServiceNetworkVpcAssociation"},"UpdateTargetGroup":{"name":"UpdateTargetGroup","service":"vpc-lattice","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"TargetGroup"}],"description":"Grants permission to update a target group","accessLevel":"Write","resourceTypes":[{"name":"TargetGroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_UpdateTargetGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html#amazonvpclattice-UpdateTargetGroup"}},"resources":[{"name":"AccessLogSubscription","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/${AccessLogSubscriptionId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction"]},{"name":"DomainVerification","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/${DomainVerificationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:DomainName"]},{"name":"Listener","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}/listener/${ListenerId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:Protocol","vpc-lattice:TargetGroupArns"]},{"name":"ResourceConfiguration","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/${ResourceConfigurationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction"]},{"name":"ResourceEndpointAssociation","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceendpointassociation/${ResourceEndpointAssociationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:ResourceConfigurationArn","vpc-lattice:VpcEndpointId"]},{"name":"ResourceGateway","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/${ResourceGatewayId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:VpcId"]},{"name":"Rule","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}/listener/${ListenerId}/rule/${RuleId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:TargetGroupArns"]},{"name":"Service","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:AuthType","vpc-lattice:CreateAction"]},{"name":"ServiceNetwork","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/${ServiceNetworkId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:AuthType","vpc-lattice:CreateAction"]},{"name":"ServiceNetworkResourceAssociation","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkresourceassociation/${ServiceNetworkResourceAssociationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:ResourceConfigurationArn","vpc-lattice:ServiceNetworkArn"]},{"name":"ServiceNetworkServiceAssociation","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkserviceassociation/${ServiceNetworkServiceAssociationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:ServiceArn","vpc-lattice:ServiceNetworkArn"]},{"name":"ServiceNetworkVpcAssociation","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkvpcassociation/${ServiceNetworkVpcAssociationId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:PrivateDnsPreference","vpc-lattice:PrivateDnsSpecifiedDomains","vpc-lattice:SecurityGroupIds","vpc-lattice:ServiceNetworkArn","vpc-lattice:VpcId"]},{"name":"TargetGroup","arnFormats":["arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/${TargetGroupId}"],"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","vpc-lattice:CreateAction","vpc-lattice:VpcId"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the presence of tag keys in the request"},"vpc-lattice:AuthType":{"types":["String"],"description":"Filters access by the auth type specified in the request"},"vpc-lattice:CreateAction":{"types":["String"],"description":"Filters access by the name of a resource-creating API action"},"vpc-lattice:DomainName":{"types":["String"],"description":"Filters access by the domain name"},"vpc-lattice:PrivateDnsPreference":{"types":["String"],"description":"Filters access by the private dns preference"},"vpc-lattice:PrivateDnsSpecifiedDomains":{"types":["ArrayOfString"],"description":"Filters access by the private dns domains"},"vpc-lattice:Protocol":{"types":["String"],"description":"Filters access by the protocol specified in the request"},"vpc-lattice:ResourceConfigurationArn":{"types":["ARN"],"description":"Filters access by the ARN of a resource configuration"},"vpc-lattice:SecurityGroupIds":{"types":["ArrayOfString"],"description":"Filters access by the IDs of security groups"},"vpc-lattice:ServiceArn":{"types":["ARN"],"description":"Filters access by the ARN of a service"},"vpc-lattice:ServiceNetworkArn":{"types":["ARN"],"description":"Filters access by the ARN of a service network"},"vpc-lattice:TargetGroupArns":{"types":["ArrayOfARN"],"description":"Filters access by the ARNs of target groups"},"vpc-lattice:VpcEndpointId":{"types":["String"],"description":"Filters access by the ID of a VPC endpoint"},"vpc-lattice:VpcId":{"types":["String"],"description":"Filters access by the ID of a virtual private cloud (VPC)"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html"}

package/src/data/servicereference/services/vpce.json

@@ -1 +1 @@
-{"name":"vpce","actions":{"AllowMultiRegion":{"conditionKeys":[],"resources":[{"name":"vpc-endpoint"},{"name":"vpc-endpoint-service"}],"description":"Grants permission to manage multi-region VPC endpoints and VPC endpoint service configurations","accessLevel":"Write","resourceTypes":[{"name":"vpc-endpoint","required":false},{"name":"vpc-endpoint-service","required":false}],"permissionOnly":true}},"resources":[{"name":"vpc-endpoint","arnFormats":["arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/${VpcEndpointId}"],"conditionKeys":[]},{"name":"vpc-endpoint-service","arnFormats":["arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/${VpcEndpointServiceId}"],"conditionKeys":[]}],"conditionKeys":{}}
+{"name":"vpce","actions":{"AllowMultiRegion":{"name":"AllowMultiRegion","service":"vpce","conditionKeys":[],"resources":[{"name":"vpc-endpoint"},{"name":"vpc-endpoint-service"}],"description":"Grants permission to manage multi-region VPC endpoints and VPC endpoint service configurations","accessLevel":"Write","resourceTypes":[{"name":"vpc-endpoint","required":false},{"name":"vpc-endpoint-service","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/vpc/latest/privatelink/security_iam_service-with-iam.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsprivatelink.html#awsprivatelink-AllowMultiRegion"}},"resources":[{"name":"vpc-endpoint","arnFormats":["arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/${VpcEndpointId}"],"conditionKeys":[]},{"name":"vpc-endpoint-service","arnFormats":["arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/${VpcEndpointServiceId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsprivatelink.html"}

package/src/data/servicereference/services/waf-regional.json

@@ -1 +1 @@
-{"name":"waf-regional","actions":{"AssociateWebACL":{"conditionKeys":[],"resources":[{"name":"loadbalancer/app/"},{"name":"webacl"}],"description":"Grants permission to associate a web ACL with a resource","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":true},{"name":"webacl","required":true}]},"CreateByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to create a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}]},"CreateGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to create a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}]},"CreateIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to create an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"CreateRateBasedRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to create a RateBasedRule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}]},"CreateRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to create a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}]},"CreateRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to create a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"CreateRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rule"}],"description":"Grants permission to create a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"CreateRuleGroup":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rulegroup"}],"description":"Grants permission to create a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"CreateSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to create a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"CreateSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to create an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"CreateWebACL":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"webacl"}],"description":"Grants permission to create a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}]},"CreateWebACLMigrationStack":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to create a CloudFormation web ACL template in an S3 bucket for the purposes of migrating the web ACL from AWS WAF Classic to AWS WAF v2","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"dependentActions":["s3:PutObject"]},"CreateXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to create an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}]},"DeleteByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to delete a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}]},"DeleteGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to delete a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}]},"DeleteIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to delete an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"DeleteLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete a LoggingConfiguration from a web ACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}]},"DeletePermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete an IAM policy from a rule group","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}]},"DeleteRateBasedRule":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to delete a RateBasedRule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}]},"DeleteRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to delete a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}]},"DeleteRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to delete a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"DeleteRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to delete a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"DeleteRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"DeleteSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to delete a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"DeleteSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to delete an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"DeleteWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}]},"DeleteXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to delete an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}]},"DisassociateWebACL":{"conditionKeys":[],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to delete an association between a web ACL and a resource","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":true}]},"GetByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to retrieve a ByteMatchSet","accessLevel":"Read","resourceTypes":[{"name":"bytematchset","required":true}]},"GetChangeToken":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a change token to use in create, update, and delete requests","accessLevel":"Read","resourceTypes":[]},"GetChangeTokenStatus":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the status of a change token","accessLevel":"Read","resourceTypes":[]},"GetGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to retrieve a GeoMatchSet","accessLevel":"Read","resourceTypes":[{"name":"geomatchset","required":true}]},"GetIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to retrieve an IPSet","accessLevel":"Read","resourceTypes":[{"name":"ipset","required":true}]},"GetLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve a LoggingConfiguration","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetPermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve an IAM policy attached to a RuleGroup","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}]},"GetRateBasedRule":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to retrieve a RateBasedRule","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":true}]},"GetRateBasedRuleManagedKeys":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to retrieve the array of IP addresses that are currently being blocked by a RateBasedRule","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":true}]},"GetRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to retrieve a RegexMatchSet","accessLevel":"Read","resourceTypes":[{"name":"regexmatchset","required":true}]},"GetRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to retrieve a RegexPatternSet","accessLevel":"Read","resourceTypes":[{"name":"regexpatternset","required":true}]},"GetRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to retrieve a Rule","accessLevel":"Read","resourceTypes":[{"name":"rule","required":true}]},"GetRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve a RuleGroup","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}]},"GetSampledRequests":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve detailed information for a sample set of web requests","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":false}]},"GetSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to retrieve a SizeConstraintSet","accessLevel":"Read","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"GetSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to retrieve an SqlInjectionMatchSet","accessLevel":"Read","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"GetWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve a WebACL","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}]},"GetWebACLForResource":{"conditionKeys":[],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to retrieve a WebACL that's associated with a specified resource","accessLevel":"Read","resourceTypes":[{"name":"loadbalancer/app/","required":true}]},"GetXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to retrieve an XssMatchSet","accessLevel":"Read","resourceTypes":[{"name":"xssmatchset","required":true}]},"ListActivatedRulesInRuleGroup":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of ActivatedRule objects","accessLevel":"List","resourceTypes":[]},"ListByteMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of ByteMatchSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListGeoMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of GeoMatchSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListIPSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of IPSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListLoggingConfigurations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of LoggingConfiguration objects","accessLevel":"List","resourceTypes":[]},"ListRateBasedRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleSummary objects","accessLevel":"List","resourceTypes":[]},"ListRegexMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RegexMatchSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListRegexPatternSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RegexPatternSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListResourcesForWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve an array of resources associated with a specified WebACL","accessLevel":"List","resourceTypes":[{"name":"webacl","required":true}]},"ListRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleGroup objects","accessLevel":"List","resourceTypes":[]},"ListRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleSummary objects","accessLevel":"List","resourceTypes":[]},"ListSizeConstraintSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of SizeConstraintSetSummary objects","accessLevel":"List","resourceTypes":[]},"ListSqlInjectionMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of SqlInjectionMatchSet objects","accessLevel":"List","resourceTypes":[]},"ListSubscribedRuleGroups":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleGroup objects that you are subscribed to","accessLevel":"List","resourceTypes":[]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to lists the Tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"ListWebACLs":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of WebACLSummary objects","accessLevel":"List","resourceTypes":[]},"ListXssMatchSets":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of XssMatchSet objects","accessLevel":"List","resourceTypes":[]},"PutLoggingConfiguration":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to associates a LoggingConfiguration with a web ACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"]},"PutPermissionPolicy":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to attach an IAM policy to a specified rule group, to support rule group sharing between accounts","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}]},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to add a Tag to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to remove a Tag from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}]},"UpdateByteMatchSet":{"conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to insert or delete ByteMatchTuple objects in a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}]},"UpdateGeoMatchSet":{"conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to insert or delete GeoMatchConstraint objects in a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}]},"UpdateIPSet":{"conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to insert or delete IPSetDescriptor objects in an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}]},"UpdateRateBasedRule":{"conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to insert or delete predicate objects in a rate based rule and update the RateLimit in the rule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}]},"UpdateRegexMatchSet":{"conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to insert or delete RegexMatchTuple objects in a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}]},"UpdateRegexPatternSet":{"conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to insert or delete RegexPatternStrings in a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}]},"UpdateRule":{"conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to insert or delete predicate objects in a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}]},"UpdateRuleGroup":{"conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to insert or delete ActivatedRule objects in a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}]},"UpdateSizeConstraintSet":{"conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to insert or delete SizeConstraint objects in a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}]},"UpdateSqlInjectionMatchSet":{"conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to insert or delete SqlInjectionMatchTuple objects in an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}]},"UpdateWebACL":{"conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to insert or delete ActivatedRule objects in a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}]},"UpdateXssMatchSet":{"conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to insert or delete XssMatchTuple objects in an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}]}},"resources":[{"name":"bytematchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:bytematchset/${Id}"],"conditionKeys":[]},{"name":"geomatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:geomatchset/${Id}"],"conditionKeys":[]},{"name":"ipset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:ipset/${Id}"],"conditionKeys":[]},{"name":"loadbalancer/app/","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}"],"conditionKeys":[]},{"name":"ratebasedrule","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"regexmatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:regexmatch/${Id}"],"conditionKeys":[]},{"name":"regexpatternset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:regexpatternset/${Id}"],"conditionKeys":[]},{"name":"rule","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:rule/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rulegroup","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"sizeconstraintset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:sizeconstraintset/${Id}"],"conditionKeys":[]},{"name":"sqlinjectionmatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:sqlinjectionset/${Id}"],"conditionKeys":[]},{"name":"webacl","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:webacl/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"xssmatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:xssmatchset/${Id}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value assoicated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of mandatory tags in the request"}}}
+{"name":"waf-regional","actions":{"AssociateWebACL":{"name":"AssociateWebACL","service":"waf-regional","conditionKeys":[],"resources":[{"name":"loadbalancer/app/"},{"name":"webacl"}],"description":"Grants permission to associate a web ACL with a resource","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":true},{"name":"webacl","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_AssociateWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-AssociateWebACL"},"CreateByteMatchSet":{"name":"CreateByteMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to create a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateByteMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateByteMatchSet"},"CreateGeoMatchSet":{"name":"CreateGeoMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to create a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateGeoMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateGeoMatchSet"},"CreateIPSet":{"name":"CreateIPSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to create an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateIPSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateIPSet"},"CreateRateBasedRule":{"name":"CreateRateBasedRule","service":"waf-regional","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to create a RateBasedRule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateRateBasedRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateRateBasedRule"},"CreateRegexMatchSet":{"name":"CreateRegexMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to create a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateRegexMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateRegexMatchSet"},"CreateRegexPatternSet":{"name":"CreateRegexPatternSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to create a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateRegexPatternSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateRegexPatternSet"},"CreateRule":{"name":"CreateRule","service":"waf-regional","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rule"}],"description":"Grants permission to create a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateRule"},"CreateRuleGroup":{"name":"CreateRuleGroup","service":"waf-regional","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"rulegroup"}],"description":"Grants permission to create a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateRuleGroup"},"CreateSizeConstraintSet":{"name":"CreateSizeConstraintSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to create a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateSizeConstraintSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateSizeConstraintSet"},"CreateSqlInjectionMatchSet":{"name":"CreateSqlInjectionMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to create an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateSqlInjectionMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateSqlInjectionMatchSet"},"CreateWebACL":{"name":"CreateWebACL","service":"waf-regional","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"webacl"}],"description":"Grants permission to create a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateWebACL"},"CreateWebACLMigrationStack":{"name":"CreateWebACLMigrationStack","service":"waf-regional","conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to create a CloudFormation web ACL template in an S3 bucket for the purposes of migrating the web ACL from AWS WAF Classic to AWS WAF v2","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"dependentActions":["s3:PutObject"],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateWebACLMigrationStack.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateWebACLMigrationStack"},"CreateXssMatchSet":{"name":"CreateXssMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to create an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_CreateXssMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-CreateXssMatchSet"},"DeleteByteMatchSet":{"name":"DeleteByteMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to delete a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteByteMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteByteMatchSet"},"DeleteGeoMatchSet":{"name":"DeleteGeoMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to delete a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteGeoMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteGeoMatchSet"},"DeleteIPSet":{"name":"DeleteIPSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to delete an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteIPSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteIPSet"},"DeleteLoggingConfiguration":{"name":"DeleteLoggingConfiguration","service":"waf-regional","conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete a LoggingConfiguration from a web ACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteLoggingConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteLoggingConfiguration"},"DeletePermissionPolicy":{"name":"DeletePermissionPolicy","service":"waf-regional","conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete an IAM policy from a rule group","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeletePermissionPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeletePermissionPolicy"},"DeleteRateBasedRule":{"name":"DeleteRateBasedRule","service":"waf-regional","conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to delete a RateBasedRule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteRateBasedRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteRateBasedRule"},"DeleteRegexMatchSet":{"name":"DeleteRegexMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to delete a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteRegexMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteRegexMatchSet"},"DeleteRegexPatternSet":{"name":"DeleteRegexPatternSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to delete a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteRegexPatternSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteRegexPatternSet"},"DeleteRule":{"name":"DeleteRule","service":"waf-regional","conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to delete a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteRule"},"DeleteRuleGroup":{"name":"DeleteRuleGroup","service":"waf-regional","conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to delete a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteRuleGroup"},"DeleteSizeConstraintSet":{"name":"DeleteSizeConstraintSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to delete a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteSizeConstraintSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteSizeConstraintSet"},"DeleteSqlInjectionMatchSet":{"name":"DeleteSqlInjectionMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to delete an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteSqlInjectionMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteSqlInjectionMatchSet"},"DeleteWebACL":{"name":"DeleteWebACL","service":"waf-regional","conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to delete a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteWebACL"},"DeleteXssMatchSet":{"name":"DeleteXssMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to delete an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DeleteXssMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DeleteXssMatchSet"},"DisassociateWebACL":{"name":"DisassociateWebACL","service":"waf-regional","conditionKeys":[],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to delete an association between a web ACL and a resource","accessLevel":"Write","resourceTypes":[{"name":"loadbalancer/app/","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_DisassociateWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-DisassociateWebACL"},"GetByteMatchSet":{"name":"GetByteMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to retrieve a ByteMatchSet","accessLevel":"Read","resourceTypes":[{"name":"bytematchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetByteMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetByteMatchSet"},"GetChangeToken":{"name":"GetChangeToken","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a change token to use in create, update, and delete requests","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetChangeToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetChangeToken"},"GetChangeTokenStatus":{"name":"GetChangeTokenStatus","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the status of a change token","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetChangeTokenStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetChangeTokenStatus"},"GetGeoMatchSet":{"name":"GetGeoMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to retrieve a GeoMatchSet","accessLevel":"Read","resourceTypes":[{"name":"geomatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetGeoMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetGeoMatchSet"},"GetIPSet":{"name":"GetIPSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to retrieve an IPSet","accessLevel":"Read","resourceTypes":[{"name":"ipset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetIPSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetIPSet"},"GetLoggingConfiguration":{"name":"GetLoggingConfiguration","service":"waf-regional","conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve a LoggingConfiguration","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetLoggingConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetLoggingConfiguration"},"GetPermissionPolicy":{"name":"GetPermissionPolicy","service":"waf-regional","conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve an IAM policy attached to a RuleGroup","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetPermissionPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetPermissionPolicy"},"GetRateBasedRule":{"name":"GetRateBasedRule","service":"waf-regional","conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to retrieve a RateBasedRule","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetRateBasedRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetRateBasedRule"},"GetRateBasedRuleManagedKeys":{"name":"GetRateBasedRuleManagedKeys","service":"waf-regional","conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to retrieve the array of IP addresses that are currently being blocked by a RateBasedRule","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetRateBasedRuleManagedKeys.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetRateBasedRuleManagedKeys"},"GetRegexMatchSet":{"name":"GetRegexMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to retrieve a RegexMatchSet","accessLevel":"Read","resourceTypes":[{"name":"regexmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetRegexMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetRegexMatchSet"},"GetRegexPatternSet":{"name":"GetRegexPatternSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to retrieve a RegexPatternSet","accessLevel":"Read","resourceTypes":[{"name":"regexpatternset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetRegexPatternSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetRegexPatternSet"},"GetRule":{"name":"GetRule","service":"waf-regional","conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to retrieve a Rule","accessLevel":"Read","resourceTypes":[{"name":"rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetRule"},"GetRuleGroup":{"name":"GetRuleGroup","service":"waf-regional","conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to retrieve a RuleGroup","accessLevel":"Read","resourceTypes":[{"name":"rulegroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetRuleGroup"},"GetSampledRequests":{"name":"GetSampledRequests","service":"waf-regional","conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve detailed information for a sample set of web requests","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":false}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetSampledRequests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetSampledRequests"},"GetSizeConstraintSet":{"name":"GetSizeConstraintSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to retrieve a SizeConstraintSet","accessLevel":"Read","resourceTypes":[{"name":"sizeconstraintset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetSizeConstraintSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetSizeConstraintSet"},"GetSqlInjectionMatchSet":{"name":"GetSqlInjectionMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to retrieve an SqlInjectionMatchSet","accessLevel":"Read","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetSqlInjectionMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetSqlInjectionMatchSet"},"GetWebACL":{"name":"GetWebACL","service":"waf-regional","conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve a WebACL","accessLevel":"Read","resourceTypes":[{"name":"webacl","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetWebACL"},"GetWebACLForResource":{"name":"GetWebACLForResource","service":"waf-regional","conditionKeys":[],"resources":[{"name":"loadbalancer/app/"}],"description":"Grants permission to retrieve a WebACL that's associated with a specified resource","accessLevel":"Read","resourceTypes":[{"name":"loadbalancer/app/","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetWebACLForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetWebACLForResource"},"GetXssMatchSet":{"name":"GetXssMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to retrieve an XssMatchSet","accessLevel":"Read","resourceTypes":[{"name":"xssmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_GetXssMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-GetXssMatchSet"},"ListActivatedRulesInRuleGroup":{"name":"ListActivatedRulesInRuleGroup","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of ActivatedRule objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListActivatedRulesInRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListActivatedRulesInRuleGroup"},"ListByteMatchSets":{"name":"ListByteMatchSets","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of ByteMatchSetSummary objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListByteMatchSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListByteMatchSets"},"ListGeoMatchSets":{"name":"ListGeoMatchSets","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of GeoMatchSetSummary objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListGeoMatchSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListGeoMatchSets"},"ListIPSets":{"name":"ListIPSets","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of IPSetSummary objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListIPSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListIPSets"},"ListLoggingConfigurations":{"name":"ListLoggingConfigurations","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of LoggingConfiguration objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListLoggingConfigurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListLoggingConfigurations"},"ListRateBasedRules":{"name":"ListRateBasedRules","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleSummary objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListRateBasedRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListRateBasedRules"},"ListRegexMatchSets":{"name":"ListRegexMatchSets","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RegexMatchSetSummary objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListRegexMatchSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListRegexMatchSets"},"ListRegexPatternSets":{"name":"ListRegexPatternSets","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RegexPatternSetSummary objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListRegexPatternSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListRegexPatternSets"},"ListResourcesForWebACL":{"name":"ListResourcesForWebACL","service":"waf-regional","conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to retrieve an array of resources associated with a specified WebACL","accessLevel":"List","resourceTypes":[{"name":"webacl","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListResourcesForWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListResourcesForWebACL"},"ListRuleGroups":{"name":"ListRuleGroups","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleGroup objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListRuleGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListRuleGroups"},"ListRules":{"name":"ListRules","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleSummary objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListRules"},"ListSizeConstraintSets":{"name":"ListSizeConstraintSets","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of SizeConstraintSetSummary objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListSizeConstraintSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListSizeConstraintSets"},"ListSqlInjectionMatchSets":{"name":"ListSqlInjectionMatchSets","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of SqlInjectionMatchSet objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListSqlInjectionMatchSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListSqlInjectionMatchSets"},"ListSubscribedRuleGroups":{"name":"ListSubscribedRuleGroups","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of RuleGroup objects that you are subscribed to","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListSubscribedRuleGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListSubscribedRuleGroups"},"ListTagsForResource":{"name":"ListTagsForResource","service":"waf-regional","conditionKeys":[],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to lists the Tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListTagsForResource"},"ListWebACLs":{"name":"ListWebACLs","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of WebACLSummary objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListWebACLs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListWebACLs"},"ListXssMatchSets":{"name":"ListXssMatchSets","service":"waf-regional","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an array of XssMatchSet objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_ListXssMatchSets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-ListXssMatchSets"},"PutLoggingConfiguration":{"name":"PutLoggingConfiguration","service":"waf-regional","conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to associates a LoggingConfiguration with a web ACL","accessLevel":"Write","resourceTypes":[{"name":"webacl","required":true}],"dependentActions":["iam:CreateServiceLinkedRole"],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_PutLoggingConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-PutLoggingConfiguration"},"PutPermissionPolicy":{"name":"PutPermissionPolicy","service":"waf-regional","conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to attach an IAM policy to a specified rule group, to support rule group sharing between accounts","accessLevel":"Permissions management","resourceTypes":[{"name":"rulegroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_PutPermissionPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-PutPermissionPolicy"},"TagResource":{"name":"TagResource","service":"waf-regional","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to add a Tag to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-TagResource"},"UntagResource":{"name":"UntagResource","service":"waf-regional","conditionKeys":["aws:TagKeys"],"resources":[{"name":"ratebasedrule"},{"name":"rule"},{"name":"rulegroup"},{"name":"webacl"}],"description":"Grants permission to remove a Tag from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"ratebasedrule","required":false},{"name":"rule","required":false},{"name":"rulegroup","required":false},{"name":"webacl","required":false}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UntagResource"},"UpdateByteMatchSet":{"name":"UpdateByteMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"bytematchset"}],"description":"Grants permission to insert or delete ByteMatchTuple objects in a ByteMatchSet","accessLevel":"Write","resourceTypes":[{"name":"bytematchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateByteMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateByteMatchSet"},"UpdateGeoMatchSet":{"name":"UpdateGeoMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"geomatchset"}],"description":"Grants permission to insert or delete GeoMatchConstraint objects in a GeoMatchSet","accessLevel":"Write","resourceTypes":[{"name":"geomatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateGeoMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateGeoMatchSet"},"UpdateIPSet":{"name":"UpdateIPSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"ipset"}],"description":"Grants permission to insert or delete IPSetDescriptor objects in an IPSet","accessLevel":"Write","resourceTypes":[{"name":"ipset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateIPSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateIPSet"},"UpdateRateBasedRule":{"name":"UpdateRateBasedRule","service":"waf-regional","conditionKeys":[],"resources":[{"name":"ratebasedrule"}],"description":"Grants permission to insert or delete predicate objects in a rate based rule and update the RateLimit in the rule","accessLevel":"Write","resourceTypes":[{"name":"ratebasedrule","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateRateBasedRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateRateBasedRule"},"UpdateRegexMatchSet":{"name":"UpdateRegexMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"regexmatchset"}],"description":"Grants permission to insert or delete RegexMatchTuple objects in a RegexMatchSet","accessLevel":"Write","resourceTypes":[{"name":"regexmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateRegexMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateRegexMatchSet"},"UpdateRegexPatternSet":{"name":"UpdateRegexPatternSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"regexpatternset"}],"description":"Grants permission to insert or delete RegexPatternStrings in a RegexPatternSet","accessLevel":"Write","resourceTypes":[{"name":"regexpatternset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateRegexPatternSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateRegexPatternSet"},"UpdateRule":{"name":"UpdateRule","service":"waf-regional","conditionKeys":[],"resources":[{"name":"rule"}],"description":"Grants permission to insert or delete predicate objects in a Rule","accessLevel":"Write","resourceTypes":[{"name":"rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateRule"},"UpdateRuleGroup":{"name":"UpdateRuleGroup","service":"waf-regional","conditionKeys":[],"resources":[{"name":"rulegroup"}],"description":"Grants permission to insert or delete ActivatedRule objects in a RuleGroup","accessLevel":"Write","resourceTypes":[{"name":"rulegroup","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateRuleGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateRuleGroup"},"UpdateSizeConstraintSet":{"name":"UpdateSizeConstraintSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"sizeconstraintset"}],"description":"Grants permission to insert or delete SizeConstraint objects in a SizeConstraintSet","accessLevel":"Write","resourceTypes":[{"name":"sizeconstraintset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateSizeConstraintSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateSizeConstraintSet"},"UpdateSqlInjectionMatchSet":{"name":"UpdateSqlInjectionMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"sqlinjectionmatchset"}],"description":"Grants permission to insert or delete SqlInjectionMatchTuple objects in an SqlInjectionMatchSet","accessLevel":"Write","resourceTypes":[{"name":"sqlinjectionmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateSqlInjectionMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateSqlInjectionMatchSet"},"UpdateWebACL":{"name":"UpdateWebACL","service":"waf-regional","conditionKeys":[],"resources":[{"name":"webacl"}],"description":"Grants permission to insert or delete ActivatedRule objects in a WebACL","accessLevel":"Permissions management","resourceTypes":[{"name":"webacl","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateWebACL.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateWebACL"},"UpdateXssMatchSet":{"name":"UpdateXssMatchSet","service":"waf-regional","conditionKeys":[],"resources":[{"name":"xssmatchset"}],"description":"Grants permission to insert or delete XssMatchTuple objects in an XssMatchSet","accessLevel":"Write","resourceTypes":[{"name":"xssmatchset","required":true}],"operationUrl":"https://docs.aws.amazon.com/waf/latest/APIReference/API_wafRegional_UpdateXssMatchSet.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html#awswafregional-UpdateXssMatchSet"}},"resources":[{"name":"bytematchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:bytematchset/${Id}"],"conditionKeys":[]},{"name":"geomatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:geomatchset/${Id}"],"conditionKeys":[]},{"name":"ipset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:ipset/${Id}"],"conditionKeys":[]},{"name":"loadbalancer/app/","arnFormats":["arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}"],"conditionKeys":[]},{"name":"ratebasedrule","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"regexmatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:regexmatch/${Id}"],"conditionKeys":[]},{"name":"regexpatternset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:regexpatternset/${Id}"],"conditionKeys":[]},{"name":"rule","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:rule/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"rulegroup","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"sizeconstraintset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:sizeconstraintset/${Id}"],"conditionKeys":[]},{"name":"sqlinjectionmatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:sqlinjectionset/${Id}"],"conditionKeys":[]},{"name":"webacl","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:webacl/${Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"xssmatchset","arnFormats":["arn:${Partition}:waf-regional:${Region}:${Account}:xssmatchset/${Id}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters actions based on the allowed set of values for each of the tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters actions based on tag-value assoicated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters actions based on the presence of mandatory tags in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswafregional.html"}