{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_assurance.html",
  "name": "AWS Assurance",
  "prefix": "assurance",
  "timestamp": "1792584006",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_AcceptInvitation.html",
      "name": "AcceptInvitation",
      "description": "Grants permission to accept an invitation to connect an account to an environment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_AssignPermissionSet.html",
      "name": "AssignPermissionSet",
      "description": "Grants permission to assign a permission set to a principal",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_BatchGetComment.html",
      "name": "BatchGetComment",
      "description": "Grants permission to retrieve multiple comments in a single request",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_BatchGetControl.html",
      "name": "BatchGetControl",
      "description": "Grants permission to retrieve multiple controls in a single request",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_BatchGetTask.html",
      "name": "BatchGetTask",
      "description": "Grants permission to retrieve multiple tasks in a single request",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_Chat.html",
      "name": "Chat",
      "description": "Grants permission to start a streaming chat session with the AI Governance agent",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateAnnotation.html",
      "name": "CreateAnnotation",
      "description": "Grants permission to create an annotation on a piece of evidence",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateComment.html",
      "name": "CreateComment",
      "description": "Grants permission to add a new comment to a specific control",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateControl.html",
      "name": "CreateControl",
      "description": "Grants permission to create a leaf control within a custom framework",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateControlGroup.html",
      "name": "CreateControlGroup",
      "description": "Grants permission to create a control group within a custom framework",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateEnvironment.html",
      "name": "CreateEnvironment",
      "description": "Grants permission to create a new governance environment",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateEnvironmentConnection.html",
      "name": "CreateEnvironmentConnection",
      "description": "Grants permission to create an environment connection",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateFramework.html",
      "name": "CreateFramework",
      "description": "Grants permission to create a custom customer-owned framework",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateInvitation.html",
      "name": "CreateInvitation",
      "description": "Grants permission to invite an account to connect to an environment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreatePermissionSet.html",
      "name": "CreatePermissionSet",
      "description": "Grants permission to create a permission set in an environment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateProject.html",
      "name": "CreateProject",
      "description": "Grants permission to create a project",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_CreateTask.html",
      "name": "CreateTask",
      "description": "Grants permission to create a new task for a specific control and assessment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteAnnotation.html",
      "name": "DeleteAnnotation",
      "description": "Grants permission to delete an annotation from a piece of evidence",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteComment.html",
      "name": "DeleteComment",
      "description": "Grants permission to delete a specific comment by its identifying fields",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteControl.html",
      "name": "DeleteControl",
      "description": "Grants permission to delete a custom control",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteControlGroup.html",
      "name": "DeleteControlGroup",
      "description": "Grants permission to delete a control group",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteEnvironment.html",
      "name": "DeleteEnvironment",
      "description": "Grants permission to delete a governance environment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteEnvironmentConnection.html",
      "name": "DeleteEnvironmentConnection",
      "description": "Grants permission to delete an environment connection",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteEvidence.html",
      "name": "DeleteEvidence",
      "description": "Grants permission to remove an evidence item",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteFramework.html",
      "name": "DeleteFramework",
      "description": "Grants permission to delete a custom framework",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteInvitation.html",
      "name": "DeleteInvitation",
      "description": "Grants permission to delete an invitation or unlink a connected account",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeletePermissionSet.html",
      "name": "DeletePermissionSet",
      "description": "Grants permission to delete a permission set",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeleteProject.html",
      "name": "DeleteProject",
      "description": "Grants permission to delete a project and all its associated resources",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DeregisterOrganizationDelegatedAdmin.html",
      "name": "DeregisterOrganizationDelegatedAdmin",
      "description": "Grants permission to deregister the delegated administrator for AWS Assurance in the caller's organization",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DisableFramework.html",
      "name": "DisableFramework",
      "description": "Grants permission to disable a previously enabled framework for a specific project",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_DownloadEvidence.html",
      "name": "DownloadEvidence",
      "description": "Grants permission to retrieve the content of an evidence item",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_EnableFramework.html",
      "name": "EnableFramework",
      "description": "Grants permission to enable a framework for a project",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetAnnotation.html",
      "name": "GetAnnotation",
      "description": "Grants permission to retrieve the annotation for a specific piece of evidence",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetAssessment.html",
      "name": "GetAssessment",
      "description": "Grants permission to retrieve a single assessment",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetAssessmentReportContent.html",
      "name": "GetAssessmentReportContent",
      "description": "Grants permission to retrieve the content of a prepared assessment report",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetAssessmentReportExport.html",
      "name": "GetAssessmentReportExport",
      "description": "Grants permission to retrieve the state of an assessment report export",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetChatMessages.html",
      "name": "GetChatMessages",
      "description": "Grants permission to get messages for a chat session in chronological order",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetComment.html",
      "name": "GetComment",
      "description": "Grants permission to retrieve a specific comment by its identifying fields",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetControl.html",
      "name": "GetControl",
      "description": "Grants permission to retrieve a single leaf control within a framework version",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetControlGroup.html",
      "name": "GetControlGroup",
      "description": "Grants permission to retrieve a single control group within a framework version",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetControlStatus.html",
      "name": "GetControlStatus",
      "description": "Grants permission to retrieve the effective compliance status of a control",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetEnvironment.html",
      "name": "GetEnvironment",
      "description": "Grants permission to retrieve a governance environment by ARN or domain",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetEvidence.html",
      "name": "GetEvidence",
      "description": "Grants permission to retrieve metadata for an evidence item",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetEvidenceContent.html",
      "name": "GetEvidenceContent",
      "description": "Grants permission to retrieve the content of an evidence item",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetFramework.html",
      "name": "GetFramework",
      "description": "Grants permission to retrieve a framework resource by type and key fields",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetInvitation.html",
      "name": "GetInvitation",
      "description": "Grants permission to retrieve an invitation",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetPermissionSet.html",
      "name": "GetPermissionSet",
      "description": "Grants permission to retrieve a permission set",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetProject.html",
      "name": "GetProject",
      "description": "Grants permission to retrieve a project",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_GetTask.html",
      "name": "GetTask",
      "description": "Grants permission to retrieve a specific task by its identifying fields",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListAssessmentAnnotations.html",
      "name": "ListAssessmentAnnotations",
      "description": "Grants permission to list the annotations on one assessment, paginated",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListAssessmentJournalRecords.html",
      "name": "ListAssessmentJournalRecords",
      "description": "Grants permission to list assessment journal records, paginated",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListAssessmentOutcomes.html",
      "name": "ListAssessmentOutcomes",
      "description": "Grants permission to list a compliance score over time",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListAssessments.html",
      "name": "ListAssessments",
      "description": "Grants permission to list assessments, paginated",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListChatSessions.html",
      "name": "ListChatSessions",
      "description": "Grants permission to list chat sessions for the calling user in a governance environment",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListComments.html",
      "name": "ListComments",
      "description": "Grants permission to list comments in a governance environment",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListConnectionItems.html",
      "name": "ListConnectionItems",
      "description": "Grants permission to list the contents of an environment connection",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListControlGroups.html",
      "name": "ListControlGroups",
      "description": "Grants permission to list control groups in a framework version",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListControlResources.html",
      "name": "ListControlResources",
      "description": "Grants permission to list in-scope resources for a control",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListControls.html",
      "name": "ListControls",
      "description": "Grants permission to list controls within a control group",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListDiscoveredResources.html",
      "name": "ListDiscoveredResources",
      "description": "Grants permission to list the resources found by a discovery job (paginated)",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListEnabledFrameworks.html",
      "name": "ListEnabledFrameworks",
      "description": "Grants permission to list enabled frameworks for a governance environment",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListEnvironmentConnections.html",
      "name": "ListEnvironmentConnections",
      "description": "Grants permission to list environment connections in a governance environment",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListEnvironments.html",
      "name": "ListEnvironments",
      "description": "Grants permission to list all governance environments with optional pagination",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListEvidence.html",
      "name": "ListEvidence",
      "description": "Grants permission to list evidence items (paginated)",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListEvidenceAnnotations.html",
      "name": "ListEvidenceAnnotations",
      "description": "Grants permission to list the annotations on one version of a piece of evidence within a project, paginated",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListFrameworks.html",
      "name": "ListFrameworks",
      "description": "Grants permission to list frameworks",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListInboundInvitations.html",
      "name": "ListInboundInvitations",
      "description": "Grants permission to list invitations addressed to the caller's account",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListOutboundInvitations.html",
      "name": "ListOutboundInvitations",
      "description": "Grants permission to list invitations extended from an owned environment",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListPermissionSetAssignments.html",
      "name": "ListPermissionSetAssignments",
      "description": "Grants permission to list permission set assignments in an environment",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListPermissionSets.html",
      "name": "ListPermissionSets",
      "description": "Grants permission to list permission sets in an environment",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListProjects.html",
      "name": "ListProjects",
      "description": "Grants permission to list all projects within a governance environment",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListResourcesForControl.html",
      "name": "ListResourcesForControl",
      "description": "Grants permission to list in-scope resources for a control",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list tags for a resource",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListTaskHistory.html",
      "name": "ListTaskHistory",
      "description": "Grants permission to list task history for a task",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_ListTasks.html",
      "name": "ListTasks",
      "description": "Grants permission to list all tasks within a governance environment",
      "access": "Read",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_PublishFramework.html",
      "name": "PublishFramework",
      "description": "Grants permission to publish a custom framework",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_PutControlStatusOverride.html",
      "name": "PutControlStatusOverride",
      "description": "Grants permission to declare or remove an applicability override on a control or requirement",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_PutEvidence.html",
      "name": "PutEvidence",
      "description": "Grants permission to add evidence, or a new version of existing evidence, to support a compliance assessment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_RegisterOrganizationDelegatedAdmin.html",
      "name": "RegisterOrganizationDelegatedAdmin",
      "description": "Grants permission to register a delegated administrator for AWS Assurance in the caller's organization",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_RejectInvitation.html",
      "name": "RejectInvitation",
      "description": "Grants permission to reject an invitation",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_RevokePermissionSet.html",
      "name": "RevokePermissionSet",
      "description": "Grants permission to revoke a permission set assignment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_StartAssessment.html",
      "name": "StartAssessment",
      "description": "Grants permission to begin a new assessment for a control or framework",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_StartAssessmentReportExport.html",
      "name": "StartAssessmentReportExport",
      "description": "Grants permission to start preparing an assessment report",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_StartResourceDiscovery.html",
      "name": "StartResourceDiscovery",
      "description": "Grants permission to start discovery of in-scope resources",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to add or overwrite tags on a resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to remove tags from a resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateAnnotation.html",
      "name": "UpdateAnnotation",
      "description": "Grants permission to update the reviewer notes on an existing annotation",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateAssessment.html",
      "name": "UpdateAssessment",
      "description": "Grants permission to update an assessment's status and result",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateComment.html",
      "name": "UpdateComment",
      "description": "Grants permission to modify the content of an existing comment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateControl.html",
      "name": "UpdateControl",
      "description": "Grants permission to update a custom control",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateControlGroup.html",
      "name": "UpdateControlGroup",
      "description": "Grants permission to update a control group's mutable attributes",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateEnvironment.html",
      "name": "UpdateEnvironment",
      "description": "Grants permission to update a governance environment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateEvidence.html",
      "name": "UpdateEvidence",
      "description": "Grants permission to update evidence metadata and manage control links",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateFramework.html",
      "name": "UpdateFramework",
      "description": "Grants permission to update a custom framework",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdatePermissionSet.html",
      "name": "UpdatePermissionSet",
      "description": "Grants permission to update a permission set",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateProject.html",
      "name": "UpdateProject",
      "description": "Grants permission to update a project",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UpdateTask.html",
      "name": "UpdateTask",
      "description": "Grants permission to update an existing task's mutable fields",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_UploadEvidence.html",
      "name": "UploadEvidence",
      "description": "Grants permission to upload new evidence to support a compliance assessment",
      "access": "Write",
      "resources": [
        {
          "name": "environment",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/API_VendConnectionAccessToken.html",
      "name": "VendConnectionAccessToken",
      "description": "Grants permission to retrieve a short-lived access token for a third-party connection in an environment",
      "access": "Write",
      "resources": [],
      "conditions": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/assurance/latest/APIReference/security-iam.html",
      "name": "environment",
      "arn": "arn:${Partition}:assurance:${Region}:${Account}:environment/${Environment}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by the tags that are passed in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by a tag key and value pair of a resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by the tag keys that are passed in the request",
      "type": "ArrayOfString"
    }
  ]
}