aws-iam-language-server 0.0.9 → 0.0.10

package/src/data/servicereference/services/workmail.json

@@ -1 +1 @@
-{"name":"workmail","actions":{"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to configure vended log delivery for WorkMail audit logs","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/audit-logging.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-AllowVendedLogDeliveryForResource"},"AssociateDelegateToResource":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add a member (user or group) to the resource's set of delegates","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_AssociateDelegateToResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-AssociateDelegateToResource"},"AssociateMemberToGroup":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add a member (user or group) to the group's set","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_AssociateMemberToGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-AssociateMemberToGroup"},"AssumeImpersonationRole":{"conditionKeys":["workmail:ImpersonationRoleId"],"resources":[{"name":"organization"}],"description":"Grants permission to assume an impersonation role for the given Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_AssumeImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-AssumeImpersonationRole"},"CancelMailboxExportJob":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to cancel a currently running mailbox export job","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CancelMailboxExportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CancelMailboxExportJob"},"CreateAlias":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add an alias to the set of a given member (user or group) of WorkMail","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateAlias"},"CreateAvailabilityConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create an AvailabilityConfiguration for the given Amazon WorkMail organization and domain","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateAvailabilityConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateAvailabilityConfiguration"},"CreateGroup":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a group that can be used in WorkMail by calling the RegisterToWorkMail operation","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateGroup"},"CreateIdentityCenterApplication":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an Identity Center application for WorkMail","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateIdentityCenterApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateIdentityCenterApplication"},"CreateImpersonationRole":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create an impersonation role for the given Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateImpersonationRole"},"CreateInboundMailFlowRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create an inbound email flow rule which will apply to all email sent to an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/create-email-rules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateInboundMailFlowRule"},"CreateMailDomain":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a mail domain","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateMailDomain"},"CreateMobileDeviceAccessRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a new mobile device access rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateMobileDeviceAccessRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateMobileDeviceAccessRule"},"CreateOrganization":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateOrganization.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateOrganization"},"CreateOutboundMailFlowRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create an outbound email flow rule which will apply to all email sent from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/create-email-rules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateOutboundMailFlowRule"},"CreateResource":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a new WorkMail resource","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateResource"},"CreateSmtpGateway":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to register an SMTP gateway to a WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateSmtpGateway"},"CreateUser":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a user, which can be enabled afterwards by calling the RegisterToWorkMail operation","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateUser"},"DeleteAccessControlRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete an access control rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteAccessControlRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteAccessControlRule"},"DeleteAlias":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove one or more specified aliases from a set of aliases for a given user","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteAlias"},"DeleteAvailabilityConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the AvailabilityConfiguration for the given Amazon WorkMail organization and domain","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteAvailabilityConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteAvailabilityConfiguration"},"DeleteEmailMonitoringConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the email monitoring configuration for an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteEmailMonitoringConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteEmailMonitoringConfiguration"},"DeleteGroup":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a group from WorkMail","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteGroup"},"DeleteIdentityCenterApplication":{"conditionKeys":[],"resources":[],"description":"Grants permission to delete an Identity Center application for WorkMail","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteIdentityCenterApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteIdentityCenterApplication"},"DeleteIdentityProviderConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the identity provider configuration for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteIdentityProviderConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteIdentityProviderConfiguration"},"DeleteImpersonationRole":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete an impersonation role for the given Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteImpersonationRole"},"DeleteInboundMailFlowRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove an inbound email flow rule to no longer apply to emails sent to an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/remove-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteInboundMailFlowRule"},"DeleteMailDomain":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove an unused mail domain from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/remove_domain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMailDomain"},"DeleteMailboxPermissions":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete permissions granted to a member (user or group)","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteMailboxPermissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMailboxPermissions"},"DeleteMobileDevice":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove a mobile device from a user","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html#remove_mobile_device","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMobileDevice"},"DeleteMobileDeviceAccessOverride":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a mobile device access override","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteMobileDeviceAccessOverride.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMobileDeviceAccessOverride"},"DeleteMobileDeviceAccessRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a mobile device access rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteMobileDeviceAccessRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMobileDeviceAccessRule"},"DeleteOrganization":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete an Amazon WorkMail organization and all underlying AWS resources managed by Amazon WorkMail as part of the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteOrganization.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteOrganization"},"DeleteOutboundMailFlowRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove an outbound email flow rule so that it no longer applies to emails sent from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/remove-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteOutboundMailFlowRule"},"DeletePersonalAccessToken":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a personal access token","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeletePersonalAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeletePersonalAccessToken"},"DeleteResource":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the specified resource","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteResource"},"DeleteRetentionPolicy":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the retention policy based on the supplied organization and policy identifiers","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteRetentionPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteRetentionPolicy"},"DeleteSmtpGateway":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove an SMTP gateway from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteSmtpGateway"},"DeleteUser":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a user from WorkMail and all subsequent systems","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteUser"},"DeliverToMailbox":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to deliver emails to a WorkMail organization via the SES MailManager DeliverToMailbox action","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/sesmailmanager/latest/APIReference/API_DeliverToMailboxAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeliverToMailbox"},"DeregisterFromWorkMail":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to mark a user, group, or resource as no longer used in WorkMail","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeregisterFromWorkMail.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeregisterFromWorkMail"},"DeregisterMailDomain":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to deregister a mail domain from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeregisterMailDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeregisterMailDomain"},"DescribeEmailMonitoringConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve the email monitoring configuration for an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeEmailMonitoringConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeEmailMonitoringConfiguration"},"DescribeEntity":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read details of an entity","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeEntity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeEntity"},"DescribeGroup":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details for a group","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeGroup"},"DescribeIdentityProviderConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the identity provider configuration for the organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeIdentityProviderConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeIdentityProviderConfiguration"},"DescribeInboundDmarcSettings":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the settings in a DMARC policy for a specified organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeInboundDmarcSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeInboundDmarcSettings"},"DescribeInboundMailFlowRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details of an inbound mail flow rule configured for an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-actions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeInboundMailFlowRule"},"DescribeMailDomains":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to show the details of all mail domains associated with the organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/domains_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeMailDomains"},"DescribeMailboxExportJob":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve details of a mailbox export job","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeMailboxExportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeMailboxExportJob"},"DescribeOrganization":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read details of an organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeOrganization.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeOrganization"},"DescribeOutboundMailFlowRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details of an outbound mail flow rule configured for an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-outbound","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeOutboundMailFlowRule"},"DescribeResource":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details for a resource","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeResource"},"DescribeSmtpGateway":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details of an SMTP gateway registered to an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeSmtpGateway"},"DescribeUser":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read details for a user","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeUser"},"DisassociateDelegateFromResource":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove a member from the resource's set of delegates","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DisassociateDelegateFromResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DisassociateDelegateFromResource"},"DisassociateMemberFromGroup":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove a member from a group","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DisassociateMemberFromGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DisassociateMemberFromGroup"},"EnableMailDomain":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to enable a mail domain in the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-EnableMailDomain"},"GetAccessControlEffect":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the effects of access control rules as they apply to a specified IPv4 address, access protocol action, or user ID","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetAccessControlEffect.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetAccessControlEffect"},"GetDefaultRetentionPolicy":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve the retention policy associated at an organizational level","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetDefaultRetentionPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetDefaultRetentionPolicy"},"GetImpersonationRole":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve an impersonation role for the given Amazon WorkMail organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetImpersonationRole"},"GetImpersonationRoleEffect":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the effect of the rules associated to an impersonation role for a specific user","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetImpersonationRoleEffect.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetImpersonationRoleEffect"},"GetJournalingRules":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the configured journaling and fallback email addresses for email journaling","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/journaling_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetJournalingRules"},"GetMailDomain":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve details of a given mail domain in an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMailDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMailDomain"},"GetMailDomainDetails":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the details of the mail domain","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/domains_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMailDomainDetails"},"GetMailboxDetails":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details of the user's mailbox","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMailboxDetails.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMailboxDetails"},"GetMobileDeviceAccessEffect":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to simulate the effect of the mobile device access rules for the given attributes of a sample access event","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMobileDeviceAccessEffect.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobileDeviceAccessEffect"},"GetMobileDeviceAccessOverride":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve a mobile device access override","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMobileDeviceAccessOverride.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobileDeviceAccessOverride"},"GetMobileDeviceDetails":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the details of the mobile device","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobileDeviceDetails"},"GetMobileDevicesForUser":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get a list of the mobile devices associated with the user","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobileDevicesForUser"},"GetMobilePolicyDetails":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the details of the mobile device policy associated with the organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/edit_organization_mobile_policy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobilePolicyDetails"},"GetPersonalAccessTokenMetadata":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read metadata for a personal access token","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetPersonalAccessTokenMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetPersonalAccessTokenMetadata"},"ListAccessControlRules":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the access control rules","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListAccessControlRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListAccessControlRules"},"ListAliases":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the aliases associated with a given entity","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListAliases.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListAliases"},"ListAvailabilityConfigurations":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list all the AvailabilityConfiguration's for the given Amazon WorkMail organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListAvailabilityConfigurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListAvailabilityConfigurations"},"ListGroupMembers":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read an overview of the members of a group. Users and groups can be members of a group","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroupMembers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListGroupMembers"},"ListGroups":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list summaries of the organization's groups","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListGroups"},"ListGroupsForEntity":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the groups to which an entity belongs","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroupsForEntity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListGroupsForEntity"},"ListImpersonationRoles":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the impersonation roles for the given Amazon WorkMail organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListImpersonationRoles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListImpersonationRoles"},"ListInboundMailFlowRules":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list inbound mail flow rules configured for an organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-actions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListInboundMailFlowRules"},"ListMailDomains":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the mail domains for a given organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMailDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMailDomains"},"ListMailboxExportJobs":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list mailbox export jobs","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMailboxExportJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMailboxExportJobs"},"ListMailboxPermissions":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the mailbox permissions associated with a user, group, or resource mailbox","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMailboxPermissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMailboxPermissions"},"ListMobileDeviceAccessOverrides":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the mobile device access overrides","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMobileDeviceAccessOverrides.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMobileDeviceAccessOverrides"},"ListMobileDeviceAccessRules":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the mobile device access rules","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMobileDeviceAccessRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMobileDeviceAccessRules"},"ListOrganizations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the non-deleted organizations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListOrganizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListOrganizations"},"ListOutboundMailFlowRules":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list outbound mail flow rules configured for an organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-outbound","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListOutboundMailFlowRules"},"ListPersonalAccessTokens":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list metadata for personal access tokens","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListPersonalAccessTokens.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListPersonalAccessTokens"},"ListResourceDelegates":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the delegates associated with a resource","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListResourceDelegates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListResourceDelegates"},"ListResources":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the organization's resources","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListResources"},"ListSmtpGateways":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list SMTP gateways registered to the organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListSmtpGateways"},"ListTagsForResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"organization"}],"description":"Grants permission to list the tags applied to an Amazon WorkMail organization resource","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListTagsForResource"},"ListUsers":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the organization's users","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListUsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListUsers"},"PutAccessControlRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add a new access control rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutAccessControlRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutAccessControlRule"},"PutEmailMonitoringConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add or update the email monitoring configuration for an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutEmailMonitoringConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutEmailMonitoringConfiguration"},"PutIdentityProviderConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add or update the identity provider configuration for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutIdentityProviderConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutIdentityProviderConfiguration"},"PutInboundDmarcSettings":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to enable or disable a DMARC policy for a given organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutInboundDmarcSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutInboundDmarcSettings"},"PutMailboxPermissions":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to set permissions for a user, group, or resource, replacing any existing permissions","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutMailboxPermissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutMailboxPermissions"},"PutMobileDeviceAccessOverride":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add or update a mobile device access override","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutMobileDeviceAccessOverride.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutMobileDeviceAccessOverride"},"PutRetentionPolicy":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add or update the retention policy","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutRetentionPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutRetentionPolicy"},"RegisterMailDomain":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to register a new mail domain in an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_RegisterMailDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-RegisterMailDomain"},"RegisterToWorkMail":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to register an existing and disabled user, group, or resource for use by associating a mailbox and calendaring capabilities","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_RegisterToWorkMail.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-RegisterToWorkMail"},"ResetPassword":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to allow the administrator to reset the password for a user","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ResetPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ResetPassword"},"SearchMembers":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to perform a prefix search to find a specific user in a mail group","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/groups_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-SearchMembers"},"SetDefaultMailDomain":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to set the default mail domain for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/default_domain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-SetDefaultMailDomain"},"SetJournalingRules":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to set journaling and fallback email addresses for email journaling","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/journaling_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-SetJournalingRules"},"SetMobilePolicyDetails":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to set the details of a mobile policy associated with the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/edit_organization_mobile_policy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-SetMobilePolicyDetails"},"StartMailboxExportJob":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to start a new mailbox export job","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_StartMailboxExportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-StartMailboxExportJob"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"organization"}],"description":"Grants permission to tag the specified Amazon WorkMail organization resource","accessLevel":"Tagging","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-TagResource"},"TestAvailabilityConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to performs a test on an availability provider to ensure that access is allowed","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_TestAvailabilityConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-TestAvailabilityConfiguration"},"TestInboundMailFlowRules":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to test what inbound rules will apply to an email with a given sender and recipient","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/test-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-TestInboundMailFlowRules"},"TestOutboundMailFlowRules":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to test what outbound rules will apply to an email with a given sender and recipient","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/test-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-TestOutboundMailFlowRules"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"organization"}],"description":"Grants permission to untag the specified Amazon WorkMail organization resource","accessLevel":"Tagging","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UntagResource"},"UpdateAvailabilityConfiguration":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update an existing AvailabilityConfiguration for the given Amazon WorkMail organization and domain","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateAvailabilityConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateAvailabilityConfiguration"},"UpdateDefaultMailDomain":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update which domain is the default domain for an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateDefaultMailDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateDefaultMailDomain"},"UpdateGroup":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update details of a group","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateGroup"},"UpdateImpersonationRole":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update an existing impersonation role for the given Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateImpersonationRole"},"UpdateInboundMailFlowRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the details of an inbound email flow rule which will apply to all email sent to an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/modify-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateInboundMailFlowRule"},"UpdateMailboxQuota":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the maximum size (in MB) of the user's mailbox","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateMailboxQuota.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateMailboxQuota"},"UpdateMobileDeviceAccessRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update a mobile device access rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateMobileDeviceAccessRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateMobileDeviceAccessRule"},"UpdateOutboundMailFlowRule":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the details of an outbound email flow rule which will apply to all email sent from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/modify-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateOutboundMailFlowRule"},"UpdatePrimaryEmailAddress":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the primary email for a user, group, or resource","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdatePrimaryEmailAddress.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdatePrimaryEmailAddress"},"UpdateResource":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update details for the resource","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateResource"},"UpdateSmtpGateway":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the details of an existing SMTP gateway registered to an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateSmtpGateway"},"UpdateUser":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update details of a user","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateUser"},"WipeMobileDevice":{"conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remotely wipe the mobile device associated with a user's account","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html#remote_wipe_device","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-WipeMobileDevice"}},"resources":[{"name":"organization","arnFormats":["arn:${Partition}:workmail:${Region}:${Account}:organization/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"workmail:ImpersonationRoleId":{"types":["String"],"description":"Filters access by the ImpersonationRoleId that is passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html"}
+{"name":"workmail","actions":{"AllowVendedLogDeliveryForResource":{"name":"AllowVendedLogDeliveryForResource","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to configure vended log delivery for WorkMail audit logs","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/audit-logging.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-AllowVendedLogDeliveryForResource"},"AssociateDelegateToResource":{"name":"AssociateDelegateToResource","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add a member (user or group) to the resource's set of delegates","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_AssociateDelegateToResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-AssociateDelegateToResource"},"AssociateMemberToGroup":{"name":"AssociateMemberToGroup","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add a member (user or group) to the group's set","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_AssociateMemberToGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-AssociateMemberToGroup"},"AssumeImpersonationRole":{"name":"AssumeImpersonationRole","service":"workmail","conditionKeys":["workmail:ImpersonationRoleId"],"resources":[{"name":"organization"}],"description":"Grants permission to assume an impersonation role for the given Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_AssumeImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-AssumeImpersonationRole"},"CancelMailboxExportJob":{"name":"CancelMailboxExportJob","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to cancel a currently running mailbox export job","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CancelMailboxExportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CancelMailboxExportJob"},"CreateAlias":{"name":"CreateAlias","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add an alias to the set of a given member (user or group) of WorkMail","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateAlias"},"CreateAvailabilityConfiguration":{"name":"CreateAvailabilityConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create an AvailabilityConfiguration for the given Amazon WorkMail organization and domain","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateAvailabilityConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateAvailabilityConfiguration"},"CreateGroup":{"name":"CreateGroup","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a group that can be used in WorkMail by calling the RegisterToWorkMail operation","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateGroup"},"CreateIdentityCenterApplication":{"name":"CreateIdentityCenterApplication","service":"workmail","conditionKeys":[],"resources":[],"description":"Grants permission to create an Identity Center application for WorkMail","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateIdentityCenterApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateIdentityCenterApplication"},"CreateImpersonationRole":{"name":"CreateImpersonationRole","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create an impersonation role for the given Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateImpersonationRole"},"CreateInboundMailFlowRule":{"name":"CreateInboundMailFlowRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create an inbound email flow rule which will apply to all email sent to an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/create-email-rules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateInboundMailFlowRule"},"CreateMailDomain":{"name":"CreateMailDomain","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a mail domain","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateMailDomain"},"CreateMobileDeviceAccessRule":{"name":"CreateMobileDeviceAccessRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a new mobile device access rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateMobileDeviceAccessRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateMobileDeviceAccessRule"},"CreateOrganization":{"name":"CreateOrganization","service":"workmail","conditionKeys":[],"resources":[],"description":"Grants permission to create a new Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateOrganization.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateOrganization"},"CreateOutboundMailFlowRule":{"name":"CreateOutboundMailFlowRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create an outbound email flow rule which will apply to all email sent from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/create-email-rules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateOutboundMailFlowRule"},"CreateResource":{"name":"CreateResource","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a new WorkMail resource","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateResource"},"CreateSmtpGateway":{"name":"CreateSmtpGateway","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to register an SMTP gateway to a WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateSmtpGateway"},"CreateUser":{"name":"CreateUser","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to create a user, which can be enabled afterwards by calling the RegisterToWorkMail operation","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-CreateUser"},"DeleteAccessControlRule":{"name":"DeleteAccessControlRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete an access control rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteAccessControlRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteAccessControlRule"},"DeleteAlias":{"name":"DeleteAlias","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove one or more specified aliases from a set of aliases for a given user","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteAlias.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteAlias"},"DeleteAvailabilityConfiguration":{"name":"DeleteAvailabilityConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the AvailabilityConfiguration for the given Amazon WorkMail organization and domain","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteAvailabilityConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteAvailabilityConfiguration"},"DeleteEmailMonitoringConfiguration":{"name":"DeleteEmailMonitoringConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the email monitoring configuration for an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteEmailMonitoringConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteEmailMonitoringConfiguration"},"DeleteGroup":{"name":"DeleteGroup","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a group from WorkMail","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteGroup"},"DeleteIdentityCenterApplication":{"name":"DeleteIdentityCenterApplication","service":"workmail","conditionKeys":[],"resources":[],"description":"Grants permission to delete an Identity Center application for WorkMail","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteIdentityCenterApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteIdentityCenterApplication"},"DeleteIdentityProviderConfiguration":{"name":"DeleteIdentityProviderConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the identity provider configuration for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteIdentityProviderConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteIdentityProviderConfiguration"},"DeleteImpersonationRole":{"name":"DeleteImpersonationRole","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete an impersonation role for the given Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteImpersonationRole"},"DeleteInboundMailFlowRule":{"name":"DeleteInboundMailFlowRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove an inbound email flow rule to no longer apply to emails sent to an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/remove-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteInboundMailFlowRule"},"DeleteMailDomain":{"name":"DeleteMailDomain","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove an unused mail domain from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/remove_domain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMailDomain"},"DeleteMailboxPermissions":{"name":"DeleteMailboxPermissions","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete permissions granted to a member (user or group)","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteMailboxPermissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMailboxPermissions"},"DeleteMobileDevice":{"name":"DeleteMobileDevice","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove a mobile device from a user","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html#remove_mobile_device","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMobileDevice"},"DeleteMobileDeviceAccessOverride":{"name":"DeleteMobileDeviceAccessOverride","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a mobile device access override","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteMobileDeviceAccessOverride.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMobileDeviceAccessOverride"},"DeleteMobileDeviceAccessRule":{"name":"DeleteMobileDeviceAccessRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a mobile device access rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteMobileDeviceAccessRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteMobileDeviceAccessRule"},"DeleteOrganization":{"name":"DeleteOrganization","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete an Amazon WorkMail organization and all underlying AWS resources managed by Amazon WorkMail as part of the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteOrganization.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteOrganization"},"DeleteOutboundMailFlowRule":{"name":"DeleteOutboundMailFlowRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove an outbound email flow rule so that it no longer applies to emails sent from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/remove-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteOutboundMailFlowRule"},"DeletePersonalAccessToken":{"name":"DeletePersonalAccessToken","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a personal access token","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeletePersonalAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeletePersonalAccessToken"},"DeleteResource":{"name":"DeleteResource","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the specified resource","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteResource"},"DeleteRetentionPolicy":{"name":"DeleteRetentionPolicy","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete the retention policy based on the supplied organization and policy identifiers","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteRetentionPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteRetentionPolicy"},"DeleteSmtpGateway":{"name":"DeleteSmtpGateway","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove an SMTP gateway from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteSmtpGateway"},"DeleteUser":{"name":"DeleteUser","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to delete a user from WorkMail and all subsequent systems","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeleteUser"},"DeliverToMailbox":{"name":"DeliverToMailbox","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to deliver emails to a WorkMail organization via the SES MailManager DeliverToMailbox action","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/sesmailmanager/latest/APIReference/API_DeliverToMailboxAction.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeliverToMailbox"},"DeregisterFromWorkMail":{"name":"DeregisterFromWorkMail","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to mark a user, group, or resource as no longer used in WorkMail","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeregisterFromWorkMail.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeregisterFromWorkMail"},"DeregisterMailDomain":{"name":"DeregisterMailDomain","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to deregister a mail domain from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeregisterMailDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DeregisterMailDomain"},"DescribeEmailMonitoringConfiguration":{"name":"DescribeEmailMonitoringConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve the email monitoring configuration for an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeEmailMonitoringConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeEmailMonitoringConfiguration"},"DescribeEntity":{"name":"DescribeEntity","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read details of an entity","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeEntity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeEntity"},"DescribeGroup":{"name":"DescribeGroup","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details for a group","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeGroup"},"DescribeIdentityProviderConfiguration":{"name":"DescribeIdentityProviderConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the identity provider configuration for the organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeIdentityProviderConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeIdentityProviderConfiguration"},"DescribeInboundDmarcSettings":{"name":"DescribeInboundDmarcSettings","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the settings in a DMARC policy for a specified organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeInboundDmarcSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeInboundDmarcSettings"},"DescribeInboundMailFlowRule":{"name":"DescribeInboundMailFlowRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details of an inbound mail flow rule configured for an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-actions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeInboundMailFlowRule"},"DescribeMailDomains":{"name":"DescribeMailDomains","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to show the details of all mail domains associated with the organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/domains_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeMailDomains"},"DescribeMailboxExportJob":{"name":"DescribeMailboxExportJob","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve details of a mailbox export job","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeMailboxExportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeMailboxExportJob"},"DescribeOrganization":{"name":"DescribeOrganization","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read details of an organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeOrganization.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeOrganization"},"DescribeOutboundMailFlowRule":{"name":"DescribeOutboundMailFlowRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details of an outbound mail flow rule configured for an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-outbound","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeOutboundMailFlowRule"},"DescribeResource":{"name":"DescribeResource","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details for a resource","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeResource"},"DescribeSmtpGateway":{"name":"DescribeSmtpGateway","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details of an SMTP gateway registered to an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeSmtpGateway"},"DescribeUser":{"name":"DescribeUser","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read details for a user","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DescribeUser"},"DisassociateDelegateFromResource":{"name":"DisassociateDelegateFromResource","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove a member from the resource's set of delegates","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DisassociateDelegateFromResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DisassociateDelegateFromResource"},"DisassociateMemberFromGroup":{"name":"DisassociateMemberFromGroup","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remove a member from a group","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_DisassociateMemberFromGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-DisassociateMemberFromGroup"},"EnableMailDomain":{"name":"EnableMailDomain","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to enable a mail domain in the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-EnableMailDomain"},"GetAccessControlEffect":{"name":"GetAccessControlEffect","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the effects of access control rules as they apply to a specified IPv4 address, access protocol action, or user ID","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetAccessControlEffect.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetAccessControlEffect"},"GetDefaultRetentionPolicy":{"name":"GetDefaultRetentionPolicy","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve the retention policy associated at an organizational level","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetDefaultRetentionPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetDefaultRetentionPolicy"},"GetImpersonationRole":{"name":"GetImpersonationRole","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve an impersonation role for the given Amazon WorkMail organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetImpersonationRole"},"GetImpersonationRoleEffect":{"name":"GetImpersonationRoleEffect","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the effect of the rules associated to an impersonation role for a specific user","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetImpersonationRoleEffect.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetImpersonationRoleEffect"},"GetJournalingRules":{"name":"GetJournalingRules","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the configured journaling and fallback email addresses for email journaling","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/journaling_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetJournalingRules"},"GetMailDomain":{"name":"GetMailDomain","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve details of a given mail domain in an organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMailDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMailDomain"},"GetMailDomainDetails":{"name":"GetMailDomainDetails","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the details of the mail domain","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/domains_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMailDomainDetails"},"GetMailboxDetails":{"name":"GetMailboxDetails","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read the details of the user's mailbox","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMailboxDetails.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMailboxDetails"},"GetMobileDeviceAccessEffect":{"name":"GetMobileDeviceAccessEffect","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to simulate the effect of the mobile device access rules for the given attributes of a sample access event","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMobileDeviceAccessEffect.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobileDeviceAccessEffect"},"GetMobileDeviceAccessOverride":{"name":"GetMobileDeviceAccessOverride","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to retrieve a mobile device access override","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMobileDeviceAccessOverride.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobileDeviceAccessOverride"},"GetMobileDeviceDetails":{"name":"GetMobileDeviceDetails","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the details of the mobile device","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobileDeviceDetails"},"GetMobileDevicesForUser":{"name":"GetMobileDevicesForUser","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get a list of the mobile devices associated with the user","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobileDevicesForUser"},"GetMobilePolicyDetails":{"name":"GetMobilePolicyDetails","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to get the details of the mobile device policy associated with the organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/edit_organization_mobile_policy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetMobilePolicyDetails"},"GetPersonalAccessTokenMetadata":{"name":"GetPersonalAccessTokenMetadata","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read metadata for a personal access token","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetPersonalAccessTokenMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-GetPersonalAccessTokenMetadata"},"ListAccessControlRules":{"name":"ListAccessControlRules","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the access control rules","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListAccessControlRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListAccessControlRules"},"ListAliases":{"name":"ListAliases","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the aliases associated with a given entity","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListAliases.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListAliases"},"ListAvailabilityConfigurations":{"name":"ListAvailabilityConfigurations","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list all the AvailabilityConfiguration's for the given Amazon WorkMail organization","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListAvailabilityConfigurations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListAvailabilityConfigurations"},"ListGroupMembers":{"name":"ListGroupMembers","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to read an overview of the members of a group. Users and groups can be members of a group","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroupMembers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListGroupMembers"},"ListGroups":{"name":"ListGroups","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list summaries of the organization's groups","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListGroups"},"ListGroupsForEntity":{"name":"ListGroupsForEntity","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the groups to which an entity belongs","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroupsForEntity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListGroupsForEntity"},"ListImpersonationRoles":{"name":"ListImpersonationRoles","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the impersonation roles for the given Amazon WorkMail organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListImpersonationRoles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListImpersonationRoles"},"ListInboundMailFlowRules":{"name":"ListInboundMailFlowRules","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list inbound mail flow rules configured for an organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-actions","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListInboundMailFlowRules"},"ListMailDomains":{"name":"ListMailDomains","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the mail domains for a given organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMailDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMailDomains"},"ListMailboxExportJobs":{"name":"ListMailboxExportJobs","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list mailbox export jobs","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMailboxExportJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMailboxExportJobs"},"ListMailboxPermissions":{"name":"ListMailboxPermissions","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the mailbox permissions associated with a user, group, or resource mailbox","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMailboxPermissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMailboxPermissions"},"ListMobileDeviceAccessOverrides":{"name":"ListMobileDeviceAccessOverrides","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the mobile device access overrides","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMobileDeviceAccessOverrides.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMobileDeviceAccessOverrides"},"ListMobileDeviceAccessRules":{"name":"ListMobileDeviceAccessRules","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the mobile device access rules","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMobileDeviceAccessRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListMobileDeviceAccessRules"},"ListOrganizations":{"name":"ListOrganizations","service":"workmail","conditionKeys":[],"resources":[],"description":"Grants permission to list the non-deleted organizations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListOrganizations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListOrganizations"},"ListOutboundMailFlowRules":{"name":"ListOutboundMailFlowRules","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list outbound mail flow rules configured for an organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-outbound","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListOutboundMailFlowRules"},"ListPersonalAccessTokens":{"name":"ListPersonalAccessTokens","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list metadata for personal access tokens","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListPersonalAccessTokens.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListPersonalAccessTokens"},"ListResourceDelegates":{"name":"ListResourceDelegates","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the delegates associated with a resource","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListResourceDelegates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListResourceDelegates"},"ListResources":{"name":"ListResources","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the organization's resources","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListResources"},"ListSmtpGateways":{"name":"ListSmtpGateways","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list SMTP gateways registered to the organization","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListSmtpGateways"},"ListTagsForResource":{"name":"ListTagsForResource","service":"workmail","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"organization"}],"description":"Grants permission to list the tags applied to an Amazon WorkMail organization resource","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListTagsForResource"},"ListUsers":{"name":"ListUsers","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to list the organization's users","accessLevel":"List","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListUsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ListUsers"},"PutAccessControlRule":{"name":"PutAccessControlRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add a new access control rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutAccessControlRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutAccessControlRule"},"PutEmailMonitoringConfiguration":{"name":"PutEmailMonitoringConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add or update the email monitoring configuration for an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutEmailMonitoringConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutEmailMonitoringConfiguration"},"PutIdentityProviderConfiguration":{"name":"PutIdentityProviderConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add or update the identity provider configuration for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutIdentityProviderConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutIdentityProviderConfiguration"},"PutInboundDmarcSettings":{"name":"PutInboundDmarcSettings","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to enable or disable a DMARC policy for a given organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutInboundDmarcSettings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutInboundDmarcSettings"},"PutMailboxPermissions":{"name":"PutMailboxPermissions","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to set permissions for a user, group, or resource, replacing any existing permissions","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutMailboxPermissions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutMailboxPermissions"},"PutMobileDeviceAccessOverride":{"name":"PutMobileDeviceAccessOverride","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add or update a mobile device access override","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutMobileDeviceAccessOverride.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutMobileDeviceAccessOverride"},"PutRetentionPolicy":{"name":"PutRetentionPolicy","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to add or update the retention policy","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutRetentionPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-PutRetentionPolicy"},"RegisterMailDomain":{"name":"RegisterMailDomain","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to register a new mail domain in an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_RegisterMailDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-RegisterMailDomain"},"RegisterToWorkMail":{"name":"RegisterToWorkMail","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to register an existing and disabled user, group, or resource for use by associating a mailbox and calendaring capabilities","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_RegisterToWorkMail.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-RegisterToWorkMail"},"ResetPassword":{"name":"ResetPassword","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to allow the administrator to reset the password for a user","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_ResetPassword.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-ResetPassword"},"SearchMembers":{"name":"SearchMembers","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to perform a prefix search to find a specific user in a mail group","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/groups_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-SearchMembers"},"SetDefaultMailDomain":{"name":"SetDefaultMailDomain","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to set the default mail domain for the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/default_domain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-SetDefaultMailDomain"},"SetJournalingRules":{"name":"SetJournalingRules","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to set journaling and fallback email addresses for email journaling","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/journaling_overview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-SetJournalingRules"},"SetMobilePolicyDetails":{"name":"SetMobilePolicyDetails","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to set the details of a mobile policy associated with the organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/edit_organization_mobile_policy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-SetMobilePolicyDetails"},"StartMailboxExportJob":{"name":"StartMailboxExportJob","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to start a new mailbox export job","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_StartMailboxExportJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-StartMailboxExportJob"},"TagResource":{"name":"TagResource","service":"workmail","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"organization"}],"description":"Grants permission to tag the specified Amazon WorkMail organization resource","accessLevel":"Tagging","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-TagResource"},"TestAvailabilityConfiguration":{"name":"TestAvailabilityConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to performs a test on an availability provider to ensure that access is allowed","accessLevel":"Read","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_TestAvailabilityConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-TestAvailabilityConfiguration"},"TestInboundMailFlowRules":{"name":"TestInboundMailFlowRules","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to test what inbound rules will apply to an email with a given sender and recipient","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/test-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-TestInboundMailFlowRules"},"TestOutboundMailFlowRules":{"name":"TestOutboundMailFlowRules","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to test what outbound rules will apply to an email with a given sender and recipient","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/test-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-TestOutboundMailFlowRules"},"UntagResource":{"name":"UntagResource","service":"workmail","conditionKeys":["aws:TagKeys"],"resources":[{"name":"organization"}],"description":"Grants permission to untag the specified Amazon WorkMail organization resource","accessLevel":"Tagging","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UntagResource"},"UpdateAvailabilityConfiguration":{"name":"UpdateAvailabilityConfiguration","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update an existing AvailabilityConfiguration for the given Amazon WorkMail organization and domain","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateAvailabilityConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateAvailabilityConfiguration"},"UpdateDefaultMailDomain":{"name":"UpdateDefaultMailDomain","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update which domain is the default domain for an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateDefaultMailDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateDefaultMailDomain"},"UpdateGroup":{"name":"UpdateGroup","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update details of a group","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateGroup"},"UpdateImpersonationRole":{"name":"UpdateImpersonationRole","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update an existing impersonation role for the given Amazon WorkMail organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateImpersonationRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateImpersonationRole"},"UpdateInboundMailFlowRule":{"name":"UpdateInboundMailFlowRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the details of an inbound email flow rule which will apply to all email sent to an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/modify-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateInboundMailFlowRule"},"UpdateMailboxQuota":{"name":"UpdateMailboxQuota","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the maximum size (in MB) of the user's mailbox","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateMailboxQuota.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateMailboxQuota"},"UpdateMobileDeviceAccessRule":{"name":"UpdateMobileDeviceAccessRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update a mobile device access rule","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateMobileDeviceAccessRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateMobileDeviceAccessRule"},"UpdateOutboundMailFlowRule":{"name":"UpdateOutboundMailFlowRule","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the details of an outbound email flow rule which will apply to all email sent from an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/modify-email-flow-rule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateOutboundMailFlowRule"},"UpdatePrimaryEmailAddress":{"name":"UpdatePrimaryEmailAddress","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the primary email for a user, group, or resource","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdatePrimaryEmailAddress.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdatePrimaryEmailAddress"},"UpdateResource":{"name":"UpdateResource","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update details for the resource","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateResource"},"UpdateSmtpGateway":{"name":"UpdateSmtpGateway","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update the details of an existing SMTP gateway registered to an organization","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateSmtpGateway"},"UpdateUser":{"name":"UpdateUser","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to update details of a user","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateUser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-UpdateUser"},"WipeMobileDevice":{"name":"WipeMobileDevice","service":"workmail","conditionKeys":[],"resources":[{"name":"organization"}],"description":"Grants permission to remotely wipe the mobile device associated with a user's account","accessLevel":"Write","resourceTypes":[{"name":"organization","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html#remote_wipe_device","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html#amazonworkmail-WipeMobileDevice"}},"resources":[{"name":"organization","arnFormats":["arn:${Partition}:workmail:${Region}:${Account}:organization/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"},"workmail:ImpersonationRoleId":{"types":["String"],"description":"Filters access by the ImpersonationRoleId that is passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html"}

package/src/data/servicereference/services/workmailmessageflow.json

@@ -1 +1 @@
-{"name":"workmailmessageflow","actions":{"GetRawMessageContent":{"conditionKeys":[],"resources":[{"name":"RawMessage"}],"description":"Grants permission to read the content of email messages with the specified message ID","accessLevel":"Read","resourceTypes":[{"name":"RawMessage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_messageflow_GetRawMessageContent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmailmessageflow.html#amazonworkmailmessageflow-GetRawMessageContent"},"PutRawMessageContent":{"conditionKeys":[],"resources":[{"name":"RawMessage"}],"description":"Grants permission to update the content of email messages with the specified message ID","accessLevel":"Write","resourceTypes":[{"name":"RawMessage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_messageflow_PutRawMessageContent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmailmessageflow.html#amazonworkmailmessageflow-PutRawMessageContent"}},"resources":[{"name":"RawMessage","arnFormats":["arn:${Partition}:workmailmessageflow:${Region}:${Account}:message/${OrganizationId}/${Context}/${MessageId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmailmessageflow.html"}
+{"name":"workmailmessageflow","actions":{"GetRawMessageContent":{"name":"GetRawMessageContent","service":"workmailmessageflow","conditionKeys":[],"resources":[{"name":"RawMessage"}],"description":"Grants permission to read the content of email messages with the specified message ID","accessLevel":"Read","resourceTypes":[{"name":"RawMessage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_messageflow_GetRawMessageContent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmailmessageflow.html#amazonworkmailmessageflow-GetRawMessageContent"},"PutRawMessageContent":{"name":"PutRawMessageContent","service":"workmailmessageflow","conditionKeys":[],"resources":[{"name":"RawMessage"}],"description":"Grants permission to update the content of email messages with the specified message ID","accessLevel":"Write","resourceTypes":[{"name":"RawMessage","required":true}],"operationUrl":"https://docs.aws.amazon.com/workmail/latest/APIReference/API_messageflow_PutRawMessageContent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmailmessageflow.html#amazonworkmailmessageflow-PutRawMessageContent"}},"resources":[{"name":"RawMessage","arnFormats":["arn:${Partition}:workmailmessageflow:${Region}:${Account}:message/${OrganizationId}/${Context}/${MessageId}"],"conditionKeys":[]}],"conditionKeys":{},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmailmessageflow.html"}

package/src/data/servicereference/services/workspaces-instances.json

@@ -1 +1 @@
-{"name":"workspaces-instances","actions":{"AssociateVolume":{"conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to associate a workspace managed volume to a workspace managed instance in your account","accessLevel":"Write","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"dependentActions":["ec2:AttachVolume","ec2:DescribeVolumes"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_AssociateVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-AssociateVolume"},"CreateVolume":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a workspace managed volume in your account","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:CreateVolume"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-CreateVolume"},"CreateWorkspaceInstance":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a workspace managed instance in your account","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:DescribeInstances","ec2:RunInstances"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateWorkspaceInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-CreateWorkspaceInstance"},"DeleteVolume":{"conditionKeys":[],"resources":[{"name":"VolumeId"}],"description":"Grants permission to delete a workspace managed volume in your account","accessLevel":"Write","resourceTypes":[{"name":"VolumeId","required":true}],"dependentActions":["ec2:DeleteVolume","ec2:DescribeVolumes"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-DeleteVolume"},"DeleteWorkspaceInstance":{"conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to delete a workspace managed instance in your account","accessLevel":"Write","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"dependentActions":["ec2:TerminateInstances"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteWorkspaceInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-DeleteWorkspaceInstance"},"DisassociateVolume":{"conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to disassociate a workspace managed volume from a workspace managed instance in your account","accessLevel":"Write","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"dependentActions":["ec2:DescribeVolumes","ec2:DetachVolume"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DisassociateVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-DisassociateVolume"},"GetWorkspaceInstance":{"conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to get details for a specific workspace managed instance in your account","accessLevel":"Read","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_GetWorkspaceInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-GetWorkspaceInstance"},"ListInstanceTypes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all supported instance types","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListInstanceTypes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-ListInstanceTypes"},"ListRegions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all supported AWS regions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListRegions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-ListRegions"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to list user tags for resources in your account","accessLevel":"List","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-ListTagsForResource"},"ListWorkspaceInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to list workspace managed instances in your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListWorkspaceInstances.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-ListWorkspaceInstances"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to add user tags to resources in your account","accessLevel":"Tagging","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to remove user tags from resources in your account","accessLevel":"Tagging","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-UntagResource"}},"resources":[{"name":"VolumeId","arnFormats":["arn:${Partition}:ec2:${Region}:${Account}:volume/${VolumeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"WorkspaceInstanceId","arnFormats":["arn:${Partition}:workspaces-instances:${Region}:${Account}:workspaceinstance/${WorkspaceInstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html"}
+{"name":"workspaces-instances","actions":{"AssociateVolume":{"name":"AssociateVolume","service":"workspaces-instances","conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to associate a workspace managed volume to a workspace managed instance in your account","accessLevel":"Write","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"dependentActions":["ec2:AttachVolume","ec2:DescribeVolumes"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_AssociateVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-AssociateVolume"},"CreateVolume":{"name":"CreateVolume","service":"workspaces-instances","conditionKeys":[],"resources":[],"description":"Grants permission to create a workspace managed volume in your account","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:CreateVolume"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-CreateVolume"},"CreateWorkspaceInstance":{"name":"CreateWorkspaceInstance","service":"workspaces-instances","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a workspace managed instance in your account","accessLevel":"Write","resourceTypes":[],"dependentActions":["ec2:DescribeInstances","ec2:RunInstances"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_CreateWorkspaceInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-CreateWorkspaceInstance"},"DeleteVolume":{"name":"DeleteVolume","service":"workspaces-instances","conditionKeys":[],"resources":[{"name":"VolumeId"}],"description":"Grants permission to delete a workspace managed volume in your account","accessLevel":"Write","resourceTypes":[{"name":"VolumeId","required":true}],"dependentActions":["ec2:DeleteVolume","ec2:DescribeVolumes"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-DeleteVolume"},"DeleteWorkspaceInstance":{"name":"DeleteWorkspaceInstance","service":"workspaces-instances","conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to delete a workspace managed instance in your account","accessLevel":"Write","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"dependentActions":["ec2:TerminateInstances"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DeleteWorkspaceInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-DeleteWorkspaceInstance"},"DisassociateVolume":{"name":"DisassociateVolume","service":"workspaces-instances","conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to disassociate a workspace managed volume from a workspace managed instance in your account","accessLevel":"Write","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"dependentActions":["ec2:DescribeVolumes","ec2:DetachVolume"],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_DisassociateVolume.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-DisassociateVolume"},"GetWorkspaceInstance":{"name":"GetWorkspaceInstance","service":"workspaces-instances","conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to get details for a specific workspace managed instance in your account","accessLevel":"Read","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_GetWorkspaceInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-GetWorkspaceInstance"},"ListInstanceTypes":{"name":"ListInstanceTypes","service":"workspaces-instances","conditionKeys":[],"resources":[],"description":"Grants permission to list all supported instance types","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListInstanceTypes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-ListInstanceTypes"},"ListRegions":{"name":"ListRegions","service":"workspaces-instances","conditionKeys":[],"resources":[],"description":"Grants permission to list all supported AWS regions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListRegions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-ListRegions"},"ListTagsForResource":{"name":"ListTagsForResource","service":"workspaces-instances","conditionKeys":[],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to list user tags for resources in your account","accessLevel":"List","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-ListTagsForResource"},"ListWorkspaceInstances":{"name":"ListWorkspaceInstances","service":"workspaces-instances","conditionKeys":[],"resources":[],"description":"Grants permission to list workspace managed instances in your account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_ListWorkspaceInstances.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-ListWorkspaceInstances"},"TagResource":{"name":"TagResource","service":"workspaces-instances","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to add user tags to resources in your account","accessLevel":"Tagging","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-TagResource"},"UntagResource":{"name":"UntagResource","service":"workspaces-instances","conditionKeys":["aws:TagKeys"],"resources":[{"name":"WorkspaceInstanceId"}],"description":"Grants permission to remove user tags from resources in your account","accessLevel":"Tagging","resourceTypes":[{"name":"WorkspaceInstanceId","required":true}],"operationUrl":"https://docs.aws.amazon.com/workspaces/latest/api/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html#awsworkspacesmanagedinstances-UntagResource"}},"resources":[{"name":"VolumeId","arnFormats":["arn:${Partition}:ec2:${Region}:${Account}:volume/${VolumeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"WorkspaceInstanceId","arnFormats":["arn:${Partition}:workspaces-instances:${Region}:${Account}:workspaceinstance/${WorkspaceInstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access based on the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access based on the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsworkspacesmanagedinstances.html"}