{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonauroradsql.html",
  "name": "Amazon Aurora DSQL",
  "prefix": "dsql",
  "timestamp": "1778371206",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_CreateCluster.html",
      "name": "AddPeerCluster",
      "description": "Grants permission to add a peer cluster to a multi-Region cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "dsql:PutMultiRegionProperties"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_CreateCluster.html",
      "name": "CreateCluster",
      "description": "Grants permission to create new clusters",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "dsql:WitnessRegion"
      ],
      "dependents": [
        "iam:CreateServiceLinkedRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/accessing-sql-clients.html",
      "name": "DbConnect",
      "description": "Grants permission to connect to the database",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/accessing-sql-clients.html",
      "name": "DbConnectAdmin",
      "description": "Grants permission to connect to the database with admin role. Connecting with any other role requires DbConnect permission",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_DeleteCluster.html",
      "name": "DeleteCluster",
      "description": "Grants permission to delete a cluster and all of its data",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/rbp-api-operations.html",
      "name": "DeleteClusterPolicy",
      "description": "Grants permission to remove the inline resource-based policy attached to a cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/backup-aurora-dsql.html",
      "name": "GetBackupJob",
      "description": "Grants permission to get the status of an Aurora DSQL cluster backup job",
      "access": "Read",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_GetCluster.html",
      "name": "GetCluster",
      "description": "Grants permission to get information about a cluster",
      "access": "Read",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/rbp-api-operations.html",
      "name": "GetClusterPolicy",
      "description": "Grants permission to retrieve the inline resource-based policy attached to a cluster",
      "access": "Read",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/backup-aurora-dsql.html",
      "name": "GetRestoreJob",
      "description": "Grants permission to get the status of an Aurora DSQL cluster restore job",
      "access": "Read",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_GetVpcEndpointServiceName.html",
      "name": "GetVpcEndpointServiceName",
      "description": "Grants permission to retrieve the VPC endpoint service name for a cluster",
      "access": "Read",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html",
      "name": "InjectError",
      "description": "Grants permission to inject errors in targeted clusters",
      "access": "Write",
      "resources": [],
      "conditions": [
        "dsql:FisActionId",
        "dsql:FisTargetArns"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_ListClusters.html",
      "name": "ListClusters",
      "description": "Grants permission to retrieve a list of clusters",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list all tags on an Aurora DSQL resource",
      "access": "Read",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/rbp-api-operations.html",
      "name": "PutClusterPolicy",
      "description": "Grants permission to attach or update the inline resource-based policy attached to a cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_CreateCluster.html",
      "name": "PutMultiRegionProperties",
      "description": "Grants permission to update multi-Region properties of a cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_CreateCluster.html",
      "name": "PutWitnessRegion",
      "description": "Grants permission to configure and update the witness Region of a multi-Region cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [
        "dsql:WitnessRegion"
      ],
      "dependents": [
        "dsql:PutMultiRegionProperties"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_UpdateCluster.html",
      "name": "RemovePeerCluster",
      "description": "Grants permission to remove a peer cluster from a multi-Region cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "dsql:PutMultiRegionProperties"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/backup-aurora-dsql.html",
      "name": "StartBackupJob",
      "description": "Grants permission to start a backup job for an Aurora DSQL cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/backup-aurora-dsql.html",
      "name": "StartRestoreJob",
      "description": "Grants permission to start a restore job for an Aurora DSQL cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "dsql:CreateCluster",
        "iam:CreateServiceLinkedRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/backup-aurora-dsql.html",
      "name": "StopBackupJob",
      "description": "Grants permission to stop a backup job for an Aurora DSQL cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/backup-aurora-dsql.html",
      "name": "StopRestoreJob",
      "description": "Grants permission to stop a restore job for an Aurora DSQL Cluster",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to add tags to Aurora DSQL resources",
      "access": "Tagging",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to remove tags from Aurora DSQL resources",
      "access": "Tagging",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/APIReference/API_UpdateCluster.html",
      "name": "UpdateCluster",
      "description": "Grants permission to modify cluster attributes",
      "access": "Write",
      "resources": [
        {
          "name": "Cluster",
          "is_required": true
        }
      ],
      "conditions": [
        "dsql:WitnessRegion"
      ],
      "dependents": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/what-is-aurora-dsql.html",
      "name": "Cluster",
      "arn": "arn:${Partition}:dsql:${Region}:${Account}:cluster/${Identifier}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by a tag key and value pair that is allowed in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by the tags associated with the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by a list of tag keys that are allowed in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html",
      "name": "dsql:FisActionId",
      "description": "Filters access by the ID of an AWS FIS action",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html",
      "name": "dsql:FisTargetArns",
      "description": "Filters access by the ARN of an AWS FIS target",
      "type": "ArrayOfARN"
    },
    {
      "url": "https://docs.aws.amazon.com/aurora-dsql/latest/userguide/using-iam-condition-keys.html#using-iam-condition-keys-create-mr-cluster-witness",
      "name": "dsql:WitnessRegion",
      "description": "Filters access by the witness region of multi-Region clusters",
      "type": "String"
    }
  ]
}