{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_fsx.html",
  "name": "Amazon FSx",
  "prefix": "fsx",
  "timestamp": "1784505606",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/filegateway/latest/filefsxw/what-is-file-fsxw.html",
      "name": "AssociateFileGateway",
      "description": "Grants permission to associate a File Gateway instance with an Amazon FSx for Windows File Server file system",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_AssociateFileSystemAliases.html",
      "name": "AssociateFileSystemAliases",
      "description": "Grants permission to associate DNS aliases with an Amazon FSx for Windows File Server file system",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/snaplock-enterprise.html#bypass-enterprise",
      "name": "BypassSnaplockEnterpriseRetention",
      "description": "Grants permission to allow deletion of an FSx for ONTAP SnapLock Enterprise volume that contains WORM (write once, read many) files with active retention periods",
      "access": "Permissions management",
      "resources": [
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CancelDataRepositoryTask.html",
      "name": "CancelDataRepositoryTask",
      "description": "Grants permission to cancel a data repository task",
      "access": "Write",
      "resources": [
        {
          "name": "task",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CopyBackup.html",
      "name": "CopyBackup",
      "description": "Grants permission to copy a backup",
      "access": "Write",
      "resources": [
        {
          "name": "backup",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CopySnapshotAndUpdateVolume.html",
      "name": "CopySnapshotAndUpdateVolume",
      "description": "Grants permission to update an existing volume by using a snapshot from another Amazon FSx for OpenZFS file system",
      "access": "Write",
      "resources": [
        {
          "name": "snapshot",
          "is_required": true
        },
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateAndAttachS3AccessPoint.html",
      "name": "CreateAndAttachS3AccessPoint",
      "description": "Grants permission to create and attach a S3 Access Point to a FSx File System",
      "access": "Write",
      "resources": [
        {
          "name": "volume",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateBackup.html",
      "name": "CreateBackup",
      "description": "Grants permission to create a new backup of an Amazon FSx file system or an Amazon FSx volume",
      "access": "Write",
      "resources": [
        {
          "name": "backup",
          "is_required": true
        },
        {
          "name": "file-system",
          "is_required": false
        },
        {
          "name": "volume",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateDataRepositoryAssociation.html",
      "name": "CreateDataRepositoryAssociation",
      "description": "Grants permission to create a new data respository association for an Amazon FSx for Lustre file system",
      "access": "Write",
      "resources": [
        {
          "name": "association",
          "is_required": true
        },
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateDataRepositoryTask.html",
      "name": "CreateDataRepositoryTask",
      "description": "Grants permission to create a new data respository task for an Amazon FSx for Lustre file system",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        },
        {
          "name": "task",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateFileCache.html",
      "name": "CreateFileCache",
      "description": "Grants permission to create a new, empty, Amazon file cache",
      "access": "Write",
      "resources": [
        {
          "name": "association",
          "is_required": false
        },
        {
          "name": "file-cache",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateFileSystem.html",
      "name": "CreateFileSystem",
      "description": "Grants permission to create a new, empty, Amazon FSx file system",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateFileSystemFromBackup.html",
      "name": "CreateFileSystemFromBackup",
      "description": "Grants permission to create a new Amazon FSx file system from an existing backup",
      "access": "Write",
      "resources": [
        {
          "name": "backup",
          "is_required": true
        },
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateSnapshot.html",
      "name": "CreateSnapshot",
      "description": "Grants permission to create a new snapshot on a volume",
      "access": "Write",
      "resources": [
        {
          "name": "snapshot",
          "is_required": true
        },
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateStorageVirtualMachine.html",
      "name": "CreateStorageVirtualMachine",
      "description": "Grants permission to create a new storage virtual machine in an Amazon FSx for Ontap file system",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        },
        {
          "name": "storage-virtual-machine",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateVolume.html",
      "name": "CreateVolume",
      "description": "Grants permission to create a new volume",
      "access": "Write",
      "resources": [
        {
          "name": "snapshot",
          "is_required": false
        },
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "fsx:ParentVolumeId",
        "fsx:StorageVirtualMachineId"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CreateVolumeFromBackup.html",
      "name": "CreateVolumeFromBackup",
      "description": "Grants permission to create a new volume from backup",
      "access": "Write",
      "resources": [
        {
          "name": "backup",
          "is_required": true
        },
        {
          "name": "storage-virtual-machine",
          "is_required": true
        },
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "fsx:StorageVirtualMachineId"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DeleteBackup.html",
      "name": "DeleteBackup",
      "description": "Grants permission to delete a backup, deleting its contents. After deletion, the backup no longer exists, and its data is no longer available",
      "access": "Write",
      "resources": [
        {
          "name": "backup",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DeleteDataRepositoryAssociation.html",
      "name": "DeleteDataRepositoryAssociation",
      "description": "Grants permission to delete a data repository association",
      "access": "Write",
      "resources": [
        {
          "name": "association",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DeleteFileCache.html",
      "name": "DeleteFileCache",
      "description": "Grants permission to delete a file cache, deleting its contents",
      "access": "Write",
      "resources": [
        {
          "name": "association",
          "is_required": false
        },
        {
          "name": "file-cache",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DeleteFileSystem.html",
      "name": "DeleteFileSystem",
      "description": "Grants permission to delete a file system, deleting its contents and any existing automatic backups of the file system",
      "access": "Write",
      "resources": [
        {
          "name": "backup",
          "is_required": false
        },
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/on-demand-replication.html",
      "name": "DeleteResourcePolicy",
      "description": "Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and GetResourcePolicy are also required",
      "access": "Permissions management",
      "resources": [
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DeleteSnapshot.html",
      "name": "DeleteSnapshot",
      "description": "Grants permission to delete a snapshot on a volume",
      "access": "Write",
      "resources": [
        {
          "name": "snapshot",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DeleteStorageVirtualMachine.html",
      "name": "DeleteStorageVirtualMachine",
      "description": "Grants permission to delete a storage virtual machine, deleting its contents",
      "access": "Write",
      "resources": [
        {
          "name": "storage-virtual-machine",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DeleteVolume.html",
      "name": "DeleteVolume",
      "description": "Grants permission to delete a volume, deleting its contents and any existing automatic backups of the volume",
      "access": "Write",
      "resources": [
        {
          "name": "backup",
          "is_required": false
        },
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/filegateway/latest/filefsxw/what-is-file-fsxw.html",
      "name": "DescribeAssociatedFileGateways",
      "description": "Grants permission to describe the File Gateway instances associated with an Amazon FSx for Windows File Server file system",
      "access": "Read",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeBackups.html",
      "name": "DescribeBackups",
      "description": "Grants permission to return the descriptions of all backups owned by your AWS account in the AWS Region of the endpoint that you're calling",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeDataRepositoryAssociations.html",
      "name": "DescribeDataRepositoryAssociations",
      "description": "Grants permission to return the descriptions of all data repository associations owned by your AWS account in the AWS Region of the endpoint that you're calling",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeDataRepositoryTasks.html",
      "name": "DescribeDataRepositoryTasks",
      "description": "Grants permission to return the descriptions of all data repository tasks owned by your AWS account in the AWS Region of the endpoint that you're calling",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeFileCaches.html",
      "name": "DescribeFileCaches",
      "description": "Grants permission to return the descriptions of all file caches owned by your AWS account in the AWS Region of the endpoint that you're calling",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeFileSystemAliases.html",
      "name": "DescribeFileSystemAliases",
      "description": "Grants permission to return the description of all DNS aliases owned by your Amazon FSx for Windows File Server file system",
      "access": "Read",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeFileSystems.html",
      "name": "DescribeFileSystems",
      "description": "Grants permission to return the descriptions of all file systems owned by your AWS account in the AWS Region of the endpoint that you're calling",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeS3AccessPointAttachments.html",
      "name": "DescribeS3AccessPointAttachments",
      "description": "Grants permission to return the descriptions of S3 Access Point Attachments",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeSharedVpcConfiguration.html",
      "name": "DescribeSharedVpcConfiguration",
      "description": "Grants permission to return the descriptions of whether FSx route table updates from participant accounts are allowed in your account",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeSnapshots.html",
      "name": "DescribeSnapshots",
      "description": "Grants permission to return the descriptions of all snapshots owned by your AWS account in the AWS Region of the endpoint you're calling",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeStorageVirtualMachines.html",
      "name": "DescribeStorageVirtualMachines",
      "description": "Grants permission to return the descriptions of all storage virtual machines owned by your AWS account in the AWS Region of the endpoint that you're calling",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DescribeVolumes.html",
      "name": "DescribeVolumes",
      "description": "Grants permission to return the descriptions of all volumes owned by your AWS account in the AWS Region of the endpoint that you're calling",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DetachAndDeleteS3AccessPoint.html",
      "name": "DetachAndDeleteS3AccessPoint",
      "description": "Grants permission to detach an S3 Access Point from an Amazon FSx File System and delete the S3 Access Point",
      "access": "Write",
      "resources": [
        {
          "name": "volume",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/filegateway/latest/filefsxw/what-is-file-fsxw.html",
      "name": "DisassociateFileGateway",
      "description": "Grants permission to disassociate a File Gateway instance from an Amazon FSx for Windows File Server file system",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_DisassociateFileSystemAliases.html",
      "name": "DisassociateFileSystemAliases",
      "description": "Grants permission to disassociate file system aliases with an Amazon FSx for Windows File Server file system",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/on-demand-replication.html",
      "name": "GetResourcePolicy",
      "description": "Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and DeleteResourcePolicy are also required",
      "access": "Permissions management",
      "resources": [
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list tags for an Amazon FSx resource",
      "access": "Read",
      "resources": [
        {
          "name": "association",
          "is_required": false
        },
        {
          "name": "backup",
          "is_required": false
        },
        {
          "name": "file-cache",
          "is_required": false
        },
        {
          "name": "file-system",
          "is_required": false
        },
        {
          "name": "snapshot",
          "is_required": false
        },
        {
          "name": "storage-virtual-machine",
          "is_required": false
        },
        {
          "name": "task",
          "is_required": false
        },
        {
          "name": "volume",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_CopyBackup.html",
      "name": "ManageBackupPrincipalAssociations",
      "description": "Grants permission to manage backup principal associations through AWS Backup",
      "access": "Permissions management",
      "resources": [
        {
          "name": "backup",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/on-demand-replication.html",
      "name": "PutResourcePolicy",
      "description": "Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). DeleteResourcePolicy and GetResourcePolicy are also required",
      "access": "Permissions management",
      "resources": [
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_ReleaseFileSystemNfsV3Locks.html",
      "name": "ReleaseFileSystemNfsV3Locks",
      "description": "Grants permission to release file system NFS V3 locks",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_RestoreVolumeFromSnapshot.html",
      "name": "RestoreVolumeFromSnapshot",
      "description": "Grants permission to restore volume state from a snapshot",
      "access": "Write",
      "resources": [
        {
          "name": "snapshot",
          "is_required": true
        },
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_StartMisconfiguredStateRecovery.html",
      "name": "StartMisconfiguredStateRecovery",
      "description": "Grants permission to start misconfigured state recovery",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to tag an Amazon FSx resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "association",
          "is_required": false
        },
        {
          "name": "backup",
          "is_required": false
        },
        {
          "name": "file-cache",
          "is_required": false
        },
        {
          "name": "file-system",
          "is_required": false
        },
        {
          "name": "snapshot",
          "is_required": false
        },
        {
          "name": "storage-virtual-machine",
          "is_required": false
        },
        {
          "name": "task",
          "is_required": false
        },
        {
          "name": "volume",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to remove a tag from an Amazon FSx resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "association",
          "is_required": false
        },
        {
          "name": "backup",
          "is_required": false
        },
        {
          "name": "file-cache",
          "is_required": false
        },
        {
          "name": "file-system",
          "is_required": false
        },
        {
          "name": "snapshot",
          "is_required": false
        },
        {
          "name": "storage-virtual-machine",
          "is_required": false
        },
        {
          "name": "task",
          "is_required": false
        },
        {
          "name": "volume",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_UpdateDataRepositoryAssociation.html",
      "name": "UpdateDataRepositoryAssociation",
      "description": "Grants permission to update data repository association configuration",
      "access": "Write",
      "resources": [
        {
          "name": "association",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_UpdateFileCache.html",
      "name": "UpdateFileCache",
      "description": "Grants permission to update file cache configuration",
      "access": "Write",
      "resources": [
        {
          "name": "file-cache",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_UpdateFileSystem.html",
      "name": "UpdateFileSystem",
      "description": "Grants permission to update file system configuration",
      "access": "Write",
      "resources": [
        {
          "name": "file-system",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_UpdateSharedVpcConfiguration.html",
      "name": "UpdateSharedVpcConfiguration",
      "description": "Grants permission to enable or disable FSx route table updates from participant accounts in your account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_UpdateSnapshot.html",
      "name": "UpdateSnapshot",
      "description": "Grants permission to update snapshot configuration",
      "access": "Write",
      "resources": [
        {
          "name": "snapshot",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_UpdateStorageVirtualMachine.html",
      "name": "UpdateStorageVirtualMachine",
      "description": "Grants permission to update storage virtual machine configuration",
      "access": "Write",
      "resources": [
        {
          "name": "storage-virtual-machine",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/APIReference/API_UpdateVolume.html",
      "name": "UpdateVolume",
      "description": "Grants permission to update volume configuration",
      "access": "Write",
      "resources": [
        {
          "name": "volume",
          "is_required": true
        }
      ],
      "conditions": [
        "fsx:ParentVolumeId",
        "fsx:StorageVirtualMachineId"
      ]
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/LustreGuide/access-control-overview.html#access-control-resources",
      "name": "association",
      "arn": "arn:${Partition}:fsx:${Region}:${Account}:association/${FileSystemIdOrFileCacheId}/${DataRepositoryAssociationId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/WindowsGuide/access-control-overview.html#access-control-resources",
      "name": "backup",
      "arn": "arn:${Partition}:fsx:${Region}:${Account}:backup/${BackupId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/FileCacheGuide/security-iam.html",
      "name": "file-cache",
      "arn": "arn:${Partition}:fsx:${Region}:${Account}:file-cache/${FileCacheId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/WindowsGuide/access-control-overview.html#access-control-resources",
      "name": "file-system",
      "arn": "arn:${Partition}:fsx:${Region}:${Account}:file-system/${FileSystemId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/access-control-overview.html#access-control-resources",
      "name": "snapshot",
      "arn": "arn:${Partition}:fsx:${Region}:${Account}:snapshot/${VolumeId}/${SnapshotId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/security-iam.html",
      "name": "storage-virtual-machine",
      "arn": "arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/${FileSystemId}/${StorageVirtualMachineId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/LustreGuide/access-control-overview.html#access-control-resources",
      "name": "task",
      "arn": "arn:${Partition}:fsx:${Region}:${Account}:task/${TaskId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/security-iam.html",
      "name": "volume",
      "arn": "arn:${Partition}:fsx:${Region}:${Account}:volume/${FileSystemId}/${VolumeId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by the tags that are passed in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by the tags associated with the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by the tag keys that are passed in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/WindowsGuide/using-backups.html#copy-backups",
      "name": "fsx:IsBackupCopyDestination",
      "description": "Filters access by whether the backup is a destination backup for a CopyBackup operation",
      "type": "Bool"
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/WindowsGuide/using-backups.html#copy-backups",
      "name": "fsx:IsBackupCopySource",
      "description": "Filters access by whether the backup is a source backup for a CopyBackup operation",
      "type": "Bool"
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/FileCacheGuide/encryption-in-transit.html",
      "name": "fsx:NfsDataRepositoryAuthenticationEnabled",
      "description": "Filters access by NFS data repositories which support authentication",
      "type": "Bool"
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/FileCacheGuide/encryption-in-transit.html",
      "name": "fsx:NfsDataRepositoryEncryptionInTransitEnabled",
      "description": "Filters access by NFS data repositories which support encryption-in-transit",
      "type": "Bool"
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/creating-volumes.html",
      "name": "fsx:ParentVolumeId",
      "description": "Filters access by the containing parent volume for mutating volume operations",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/creating-volumes.html",
      "name": "fsx:StorageVirtualMachineId",
      "description": "Filters access by the containing storage virtual machine for a volume for mutating volume operations",
      "type": "String"
    }
  ]
}