{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
  "name": "Account access manager",
  "prefix": "account-access",
  "timestamp": "1791374406",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "CreateApplication",
      "description": "Grants permission to enable an account access manager instance and create an AWS account access application in the associated IAM Identity Center instance",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "CreateEntitlement",
      "description": "Grants permission to create an entitlement in an account access manager instance",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "DeleteApplication",
      "description": "Grants permission to delete an account access manager instance and its AWS account access application in the associated IAM Identity Center instance",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "DeleteEntitlement",
      "description": "Grants permission to delete an entitlement in an account access manager instance",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "GetApplication",
      "description": "Grants permission to describe an account access manager instance",
      "access": "Read",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "GetEntitlement",
      "description": "Grants permission to get entitlement details for an account access manager instance",
      "access": "Read",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "ListApplications",
      "description": "Grants permission to list account access manager instances",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "ListEntitlements",
      "description": "Grants permission to list entitlements for an account access manager instance",
      "access": "List",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list tags for an account access manager resource",
      "access": "Read",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "TagResource",
      "description": "Grants permission to tag an account access manager resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "application",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "UntagResource",
      "description": "Grants permission to remove tags from an account access manager resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "application",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ]
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_account-access.html",
      "name": "application",
      "arn": "arn:${Partition}:account-access:${Region}:${Account}:application/${ResourceId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by tag key-value pairs in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by tag key-value pairs attached to the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by tag keys",
      "type": "ArrayOfString"
    }
  ]
}