{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscleanrooms.html",
  "name": "AWS Clean Rooms",
  "prefix": "cleanrooms",
  "timestamp": "1780660806",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_BatchGetCollaborationAnalysisTemplate.html",
      "name": "BatchGetCollaborationAnalysisTemplate",
      "description": "Grants permission to view details of analysisTemplates associated to the collaboration",
      "access": "Read",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": true
        },
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "cleanrooms:GetCollaborationAnalysisTemplate"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_BatchGetSchema.html",
      "name": "BatchGetSchema",
      "description": "Grants permission to view details for schemas",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        },
        {
          "name": "configuredtableassociation",
          "is_required": false
        },
        {
          "name": "idmappingtable",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": [
        "cleanrooms:GetSchema"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_BatchGetSchemaAnalysisRule.html",
      "name": "BatchGetSchemaAnalysisRule",
      "description": "Grants permission to view analysis rules associated with schemas",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        },
        {
          "name": "configuredtableassociation",
          "is_required": false
        },
        {
          "name": "idmappingtable",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": [
        "cleanrooms:GetSchema"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateAnalysisTemplate.html",
      "name": "CreateAnalysisTemplate",
      "description": "Grants permission to create a new analysis template",
      "access": "Write",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateCollaboration.html",
      "name": "CreateCollaboration",
      "description": "Grants permission to create a new collaboration, a shared data collaboration environment",
      "access": "Write",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateCollaborationChangeRequest.html",
      "name": "CreateCollaborationChangeRequest",
      "description": "Grants permission to create a change request in a collaboration",
      "access": "Write",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateConfiguredAudienceModelAssociation.html",
      "name": "CreateConfiguredAudienceModelAssociation",
      "description": "Grants permission to link a Cleanrooms ML configured audience model with a collaboration by creating a new association",
      "access": "Write",
      "resources": [
        {
          "name": "configuredaudiencemodelassociation",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "cleanrooms-ml:GetConfiguredAudienceModel",
        "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
        "cleanrooms-ml:PutConfiguredAudienceModelPolicy"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateConfiguredTable.html",
      "name": "CreateConfiguredTable",
      "description": "Grants permission to create a new configured table",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "athena:GetTableMetadata",
        "glue:BatchGetPartition",
        "glue:GetDatabase",
        "glue:GetDatabases",
        "glue:GetPartition",
        "glue:GetPartitions",
        "glue:GetSchemaVersion",
        "glue:GetTable",
        "glue:GetTables"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateConfiguredTableAnalysisRule.html",
      "name": "CreateConfiguredTableAnalysisRule",
      "description": "Grants permission to create a analysis rule for a configured table",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateConfiguredTableAssociation.html",
      "name": "CreateConfiguredTableAssociation",
      "description": "Grants permission to link a configured table with a collaboration by creating a new association",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        },
        {
          "name": "configuredtableassociation",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "iam:PassRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateConfiguredTableAssociationAnalysisRule.html",
      "name": "CreateConfiguredTableAssociationAnalysisRule",
      "description": "Grants permission to create an analysis rule for a configured table association",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtableassociation",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateIdMappingTable.html",
      "name": "CreateIdMappingTable",
      "description": "Grants permission to link an id mapping workflow with a collaboration by creating a new id mapping table",
      "access": "Write",
      "resources": [
        {
          "name": "idmappingtable",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "entityresolution:AddPolicyStatement",
        "entityresolution:GetIdMappingWorkflow"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateIdNamespaceAssociation.html",
      "name": "CreateIdNamespaceAssociation",
      "description": "Grants permission to link an AWS Entity Resolution Id Namespace with a collaboration by creating a new association",
      "access": "Write",
      "resources": [
        {
          "name": "idnamespaceassociation",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "entityresolution:AddPolicyStatement",
        "entityresolution:GetIdNamespace"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateMembership.html",
      "name": "CreateMembership",
      "description": "Grants permission to join collaborations by creating a membership",
      "access": "Write",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "iam:PassRole",
        "logs:CreateLogDelivery",
        "logs:CreateLogGroup",
        "logs:DeleteLogDelivery",
        "logs:DescribeLogGroups",
        "logs:DescribeResourcePolicies",
        "logs:GetLogDelivery",
        "logs:ListLogDeliveries",
        "logs:PutResourcePolicy",
        "logs:UpdateLogDelivery",
        "s3:GetBucketLocation"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreatePrivacyBudgetTemplate.html",
      "name": "CreatePrivacyBudgetTemplate",
      "description": "Grants permission to create a new privacy budget template",
      "access": "Write",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        },
        {
          "name": "privacybudgettemplate",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteAnalysisTemplate.html",
      "name": "DeleteAnalysisTemplate",
      "description": "Grants permission to delete an existing analysis template",
      "access": "Write",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteCollaboration.html",
      "name": "DeleteCollaboration",
      "description": "Grants permission to delete an existing collaboration",
      "access": "Write",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "cleanrooms-ml:DeleteConfiguredAudienceModelPolicy",
        "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
        "cleanrooms-ml:PutConfiguredAudienceModelPolicy"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteConfiguredAudienceModelAssociation.html",
      "name": "DeleteConfiguredAudienceModelAssociation",
      "description": "Grants permission to delete an existing configured audience model association",
      "access": "Write",
      "resources": [
        {
          "name": "configuredaudiencemodelassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "cleanrooms-ml:DeleteConfiguredAudienceModelPolicy",
        "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
        "cleanrooms-ml:PutConfiguredAudienceModelPolicy"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteConfiguredTable.html",
      "name": "DeleteConfiguredTable",
      "description": "Grants permission to delete a configured table",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteConfiguredTableAnalysisRule.html",
      "name": "DeleteConfiguredTableAnalysisRule",
      "description": "Grants permission to delete an existing analysis rule",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteConfiguredTableAssociation.html",
      "name": "DeleteConfiguredTableAssociation",
      "description": "Grants permission to remove a configured table association from a collaboration",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtableassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteConfiguredTableAssociationAnalysisRule.html",
      "name": "DeleteConfiguredTableAssociationAnalysisRule",
      "description": "Grants permission to delete an existing configured table association analysis rule",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtableassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteIdMappingTable.html",
      "name": "DeleteIdMappingTable",
      "description": "Grants permission to remove an id mapping table from a collaboration",
      "access": "Write",
      "resources": [
        {
          "name": "idmappingtable",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "entityresolution:DeletePolicyStatement"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteIdNamespaceAssociation.html",
      "name": "DeleteIdNamespaceAssociation",
      "description": "Grants permission to remove an Id Namespace Association from a collaboration",
      "access": "Write",
      "resources": [
        {
          "name": "idnamespaceassociation",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "entityresolution:DeletePolicyStatement"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteMember.html",
      "name": "DeleteMember",
      "description": "Grants permission to delete members from a collaboration",
      "access": "Write",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "cleanrooms-ml:DeleteConfiguredAudienceModelPolicy",
        "cleanrooms-ml:GetConfiguredAudienceModelPolicy",
        "cleanrooms-ml:PutConfiguredAudienceModelPolicy"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeleteMembership.html",
      "name": "DeleteMembership",
      "description": "Grants permission to leave collaborations by deleting a membership",
      "access": "Write",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_DeletePrivacyBudgetTemplate.html",
      "name": "DeletePrivacyBudgetTemplate",
      "description": "Grants permission to delete an existing privacy budget template",
      "access": "Write",
      "resources": [
        {
          "name": "privacybudgettemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetAnalysisTemplate.html",
      "name": "GetAnalysisTemplate",
      "description": "Grants permission to view details for an analysis template",
      "access": "Read",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetCollaboration.html",
      "name": "GetCollaboration",
      "description": "Grants permission to view details for a collaboration",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetCollaborationAnalysisTemplate.html",
      "name": "GetCollaborationAnalysisTemplate",
      "description": "Grants permission to view details for an analysis template within a collaboration",
      "access": "Read",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": true
        },
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetCollaborationChangeRequest.html",
      "name": "GetCollaborationChangeRequest",
      "description": "Grants permission to get a change request in a collaboration",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetCollaborationConfiguredAudienceModelAssociation.html",
      "name": "GetCollaborationConfiguredAudienceModelAssociation",
      "description": "Grants permission to view details for a configured audience model association within a collaboration",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        },
        {
          "name": "configuredaudiencemodelassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetCollaborationIdNamespaceAssociation.html",
      "name": "GetCollaborationIdNamespaceAssociation",
      "description": "Grants permission to get id namespace association within a collaboration",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        },
        {
          "name": "idnamespaceassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetCollaborationPrivacyBudgetTemplate.html",
      "name": "GetCollaborationPrivacyBudgetTemplate",
      "description": "Grants permission to view details for a privacy budget template within a collaboration",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        },
        {
          "name": "privacybudgettemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetConfiguredAudienceModelAssociation.html",
      "name": "GetConfiguredAudienceModelAssociation",
      "description": "Grants permission to view details for a configured audience model association",
      "access": "Read",
      "resources": [
        {
          "name": "configuredaudiencemodelassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetConfiguredTable.html",
      "name": "GetConfiguredTable",
      "description": "Grants permission to view details for a configured table",
      "access": "Read",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetConfiguredTableAnalysisRule.html",
      "name": "GetConfiguredTableAnalysisRule",
      "description": "Grants permission to view analysis rules for a configured table",
      "access": "Read",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetConfiguredTableAssociation.html",
      "name": "GetConfiguredTableAssociation",
      "description": "Grants permission to view details for a configured table association",
      "access": "Read",
      "resources": [
        {
          "name": "configuredtableassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetConfiguredTableAssociationAnalysisRule.html",
      "name": "GetConfiguredTableAssociationAnalysisRule",
      "description": "Grants permission to view analysis rules for a configured table association",
      "access": "Read",
      "resources": [
        {
          "name": "configuredtableassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetIdMappingTable.html",
      "name": "GetIdMappingTable",
      "description": "Grants permission to view details of an id mapping table",
      "access": "Read",
      "resources": [
        {
          "name": "idmappingtable",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetIdNamespaceAssociation.html",
      "name": "GetIdNamespaceAssociation",
      "description": "Grants permission to view details of an id namespace association",
      "access": "Read",
      "resources": [
        {
          "name": "idnamespaceassociation",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "entityresolution:GetIdNamespace"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetMembership.html",
      "name": "GetMembership",
      "description": "Grants permission to view details about a membership",
      "access": "Read",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetPrivacyBudgetTemplate.html",
      "name": "GetPrivacyBudgetTemplate",
      "description": "Grants permission to view details for a privacy budget template",
      "access": "Read",
      "resources": [
        {
          "name": "privacybudgettemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetProtectedJob.html",
      "name": "GetProtectedJob",
      "description": "Grants permission to view a protected job",
      "access": "Read",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetProtectedQuery.html",
      "name": "GetProtectedQuery",
      "description": "Grants permission to view a protected query",
      "access": "Read",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetSchema.html",
      "name": "GetSchema",
      "description": "Grants permission to view details for a schema",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        },
        {
          "name": "configuredtableassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_GetSchemaAnalysisRule.html",
      "name": "GetSchemaAnalysisRule",
      "description": "Grants permission to view analysis rules associated with a schema",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        },
        {
          "name": "configuredtableassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "cleanrooms:GetSchema"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListAnalysisTemplates.html",
      "name": "ListAnalysisTemplates",
      "description": "Grants permission to list available analysis templates",
      "access": "List",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListCollaborationAnalysisTemplates.html",
      "name": "ListCollaborationAnalysisTemplates",
      "description": "Grants permission to list available analysis templates within a collaboration",
      "access": "List",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListCollaborationChangeRequests.html",
      "name": "ListCollaborationChangeRequests",
      "description": "Grants permission to list change requests in a collaboration",
      "access": "List",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListCollaborationConfiguredAudienceModelAssociations.html",
      "name": "ListCollaborationConfiguredAudienceModelAssociations",
      "description": "Grants permission to list available configured audience model association within a collaboration",
      "access": "List",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListCollaborationIdNamespaceAssociations.html",
      "name": "ListCollaborationIdNamespaceAssociations",
      "description": "Grants permission to list id namespace within a collaboration",
      "access": "List",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListCollaborationPrivacyBudgetTemplates.html",
      "name": "ListCollaborationPrivacyBudgetTemplates",
      "description": "Grants permission to list available privacy budget templates within a collaboration",
      "access": "List",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListCollaborationPrivacyBudgets.html",
      "name": "ListCollaborationPrivacyBudgets",
      "description": "Grants permission to list privacy budgets within a collaboration",
      "access": "List",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListCollaborations.html",
      "name": "ListCollaborations",
      "description": "Grants permission to list available collaborations",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListConfiguredAudienceModelAssociations.html",
      "name": "ListConfiguredAudienceModelAssociations",
      "description": "Grants permission to list available configured audience model associations for a membership",
      "access": "List",
      "resources": [
        {
          "name": "configuredaudiencemodelassociation",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListConfiguredTableAssociations.html",
      "name": "ListConfiguredTableAssociations",
      "description": "Grants permission to list available configured table associations for a membership",
      "access": "List",
      "resources": [
        {
          "name": "configuredtableassociation",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListConfiguredTables.html",
      "name": "ListConfiguredTables",
      "description": "Grants permission to list available configured tables",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListIdMappingTables.html",
      "name": "ListIdMappingTables",
      "description": "Grants permission to list available id mapping tables for a membership",
      "access": "List",
      "resources": [
        {
          "name": "idmappingtable",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListIdNamespaceAssociations.html",
      "name": "ListIdNamespaceAssociations",
      "description": "Grants permission to list entity resolution data associations for a membership",
      "access": "List",
      "resources": [
        {
          "name": "idnamespaceassociation",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListMembers.html",
      "name": "ListMembers",
      "description": "Grants permission to list the members of a collaboration",
      "access": "List",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListMemberships.html",
      "name": "ListMemberships",
      "description": "Grants permission to list available memberships",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListPrivacyBudgetTemplates.html",
      "name": "ListPrivacyBudgetTemplates",
      "description": "Grants permission to list available privacy budget templates",
      "access": "List",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        },
        {
          "name": "privacybudgettemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListPrivacyBudgets.html",
      "name": "ListPrivacyBudgets",
      "description": "Grants permission to list available privacy budgets",
      "access": "List",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListProtectedJobs.html",
      "name": "ListProtectedJobs",
      "description": "Grants permission to list protected jobs",
      "access": "List",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListProtectedQueries.html",
      "name": "ListProtectedQueries",
      "description": "Grants permission to list protected queries",
      "access": "List",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListSchemas.html",
      "name": "ListSchemas",
      "description": "Grants permission to view available schemas for a collaboration",
      "access": "List",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list tags for a resource",
      "access": "List",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": false
        },
        {
          "name": "collaboration",
          "is_required": false
        },
        {
          "name": "configuredaudiencemodelassociation",
          "is_required": false
        },
        {
          "name": "configuredtable",
          "is_required": false
        },
        {
          "name": "configuredtableassociation",
          "is_required": false
        },
        {
          "name": "membership",
          "is_required": false
        },
        {
          "name": "privacybudgettemplate",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/ml-behaviors-byom.html#ml-behaviors-byom-membership-collaboration-access",
      "name": "PassCollaboration",
      "description": "Grants permission to access a collaboration in the context of Clean Rooms ML custom models",
      "access": "Read",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/ml-behaviors-byom.html#ml-behaviors-byom-membership-collaboration-access",
      "name": "PassMembership",
      "description": "Grants permission to access a membership in the context of Clean Rooms ML custom models",
      "access": "Read",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_PopulateIdMappingTable.html",
      "name": "PopulateIdMappingTable",
      "description": "Grants permission to start an Id Mapping Job in AWS Entity Resolution to generate id mapping results in cleanrooms collaboration.",
      "access": "Write",
      "resources": [
        {
          "name": "idmappingtable",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "entityresolution:GetIdMappingWorkflow"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_PreviewPrivacyImpact.html",
      "name": "PreviewPrivacyImpact",
      "description": "Grants permission to preview privacy budget template settings",
      "access": "Read",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_StartProtectedJob.html",
      "name": "StartProtectedJob",
      "description": "Grants permission to start protected jobs",
      "access": "Write",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        },
        {
          "name": "analysistemplate",
          "is_required": false
        },
        {
          "name": "configuredtableassociation",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": [
        "cleanrooms:GetCollaborationAnalysisTemplate",
        "cleanrooms:GetSchema"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_StartProtectedQuery.html",
      "name": "StartProtectedQuery",
      "description": "Grants permission to start protected queries",
      "access": "Write",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        },
        {
          "name": "analysistemplate",
          "is_required": false
        },
        {
          "name": "configuredtableassociation",
          "is_required": false
        },
        {
          "name": "idmappingtable",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": [
        "cleanrooms:GetCollaborationAnalysisTemplate",
        "cleanrooms:GetSchema",
        "s3:GetBucketLocation",
        "s3:ListBucket",
        "s3:PutObject"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to tag a resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": false
        },
        {
          "name": "collaboration",
          "is_required": false
        },
        {
          "name": "configuredaudiencemodelassociation",
          "is_required": false
        },
        {
          "name": "configuredtable",
          "is_required": false
        },
        {
          "name": "configuredtableassociation",
          "is_required": false
        },
        {
          "name": "idmappingtable",
          "is_required": false
        },
        {
          "name": "idnamespaceassociation",
          "is_required": false
        },
        {
          "name": "membership",
          "is_required": false
        },
        {
          "name": "privacybudgettemplate",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys",
        "aws:RequestTag/${TagKey}"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to untag a resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": false
        },
        {
          "name": "collaboration",
          "is_required": false
        },
        {
          "name": "configuredaudiencemodelassociation",
          "is_required": false
        },
        {
          "name": "configuredtable",
          "is_required": false
        },
        {
          "name": "configuredtableassociation",
          "is_required": false
        },
        {
          "name": "idmappingtable",
          "is_required": false
        },
        {
          "name": "idnamespaceassociation",
          "is_required": false
        },
        {
          "name": "membership",
          "is_required": false
        },
        {
          "name": "privacybudgettemplate",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateAnalysisTemplate.html",
      "name": "UpdateAnalysisTemplate",
      "description": "Grants permission to update details of the analysis template",
      "access": "Write",
      "resources": [
        {
          "name": "analysistemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateCollaboration.html",
      "name": "UpdateCollaboration",
      "description": "Grants permission to update details of the collaboration",
      "access": "Write",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateCollaborationChangeRequest.html",
      "name": "UpdateCollaborationChangeRequest",
      "description": "Grants permission to update a change request in a collaboration",
      "access": "Write",
      "resources": [
        {
          "name": "collaboration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateConfiguredAudienceModelAssociation.html",
      "name": "UpdateConfiguredAudienceModelAssociation",
      "description": "Grants permission to update a configured audience model association",
      "access": "Write",
      "resources": [
        {
          "name": "configuredaudiencemodelassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateConfiguredTable.html",
      "name": "UpdateConfiguredTable",
      "description": "Grants permission to update an existing configured table",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "athena:GetTableMetadata",
        "cleanrooms:UpdateConfiguredTableAllowedColumns",
        "cleanrooms:UpdateConfiguredTableReference",
        "glue:BatchGetPartition",
        "glue:GetDatabase",
        "glue:GetDatabases",
        "glue:GetPartition",
        "glue:GetPartitions",
        "glue:GetSchemaVersion",
        "glue:GetTable",
        "glue:GetTables"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateConfiguredTable.html",
      "name": "UpdateConfiguredTableAllowedColumns",
      "description": "Grants permission to update the allowed columns of an existing configured table",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateConfiguredTableAnalysisRule.html",
      "name": "UpdateConfiguredTableAnalysisRule",
      "description": "Grants permission to update analysis rules for a configured table",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateConfiguredTableAssociation.html",
      "name": "UpdateConfiguredTableAssociation",
      "description": "Grants permission to update a configured table association",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtableassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "iam:PassRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateConfiguredTableAssociationAnalysisRule.html",
      "name": "UpdateConfiguredTableAssociationAnalysisRule",
      "description": "Grants permission to update analysis rules for a configured table association",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtableassociation",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateConfiguredTable.html",
      "name": "UpdateConfiguredTableReference",
      "description": "Grants permission to update the table reference of an existing configured table",
      "access": "Write",
      "resources": [
        {
          "name": "configuredtable",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateIdMappingTable.html",
      "name": "UpdateIdMappingTable",
      "description": "Grants permission to update an id mapping table",
      "access": "Write",
      "resources": [
        {
          "name": "idmappingtable",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateIdNamespaceAssociation.html",
      "name": "UpdateIdNamespaceAssociation",
      "description": "Grants permission to update a entity resolution input association",
      "access": "Write",
      "resources": [
        {
          "name": "idnamespaceassociation",
          "is_required": true
        },
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "entityresolution:GetIdNamespace"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateMembership.html",
      "name": "UpdateMembership",
      "description": "Grants permission to update details of a membership",
      "access": "Write",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "iam:PassRole",
        "logs:CreateLogDelivery",
        "logs:CreateLogGroup",
        "logs:DeleteLogDelivery",
        "logs:DescribeLogGroups",
        "logs:DescribeResourcePolicies",
        "logs:GetLogDelivery",
        "logs:ListLogDeliveries",
        "logs:PutResourcePolicy",
        "logs:UpdateLogDelivery",
        "s3:GetBucketLocation"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdatePrivacyBudgetTemplate.html",
      "name": "UpdatePrivacyBudgetTemplate",
      "description": "Grants permission to update details of the privacy budget template",
      "access": "Write",
      "resources": [
        {
          "name": "privacybudgettemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateProtectedJob.html",
      "name": "UpdateProtectedJob",
      "description": "Grants permission to update protected jobs",
      "access": "Write",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_UpdateProtectedQuery.html",
      "name": "UpdateProtectedQuery",
      "description": "Grants permission to update protected queries",
      "access": "Write",
      "resources": [
        {
          "name": "membership",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/security-iam.html",
      "name": "analysistemplate",
      "arn": "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}/analysistemplate/${AnalysisTemplateId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/security-iam.html",
      "name": "collaboration",
      "arn": "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/${CollaborationId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/security-iam.html",
      "name": "configuredaudiencemodelassociation",
      "arn": "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}/configuredaudiencemodelassociation/${ConfiguredAudienceModelAssociationId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/security-iam.html",
      "name": "configuredtable",
      "arn": "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/${ConfiguredTableId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/security-iam.html",
      "name": "configuredtableassociation",
      "arn": "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}/configuredtableassociation/${ConfiguredTableAssociationId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/security-iam.html",
      "name": "idmappingtable",
      "arn": "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}/idmappingtable/${IdMappingTableId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/security-iam.html",
      "name": "idnamespaceassociation",
      "arn": "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}/idnamespaceassociation/${IdNamespaceAssociationId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/security-iam.html",
      "name": "membership",
      "arn": "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/clean-rooms/latest/userguide/security-iam.html",
      "name": "privacybudgettemplate",
      "arn": "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/${MembershipId}/privacybudgettemplate/${PrivacyBudgetTemplateId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by the tags that are passed in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by the tags associated with the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by the tag keys that are passed in the request",
      "type": "ArrayOfString"
    }
  ]
}