{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2imagebuilder.html",
  "name": "Amazon EC2 Image Builder",
  "prefix": "imagebuilder",
  "timestamp": "1778371206",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CancelImageCreation.html",
      "name": "CancelImageCreation",
      "description": "Grants permission to cancel an image creation",
      "access": "Write",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CancelLifecycleExecution.html",
      "name": "CancelLifecycleExecution",
      "description": "Grants permission to cancel a lifecycle execution",
      "access": "Write",
      "resources": [
        {
          "name": "lifecycleExecution",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateComponent.html",
      "name": "CreateComponent",
      "description": "Grants permission to create a new component",
      "access": "Write",
      "resources": [
        {
          "name": "component",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "imagebuilder:TagResource",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext",
        "s3:GetObject",
        "s3:ListBucket"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateContainerRecipe.html",
      "name": "CreateContainerRecipe",
      "description": "Grants permission to create a new Container Recipe",
      "access": "Write",
      "resources": [
        {
          "name": "containerRecipe",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "ec2:DescribeImages",
        "ecr:DescribeImages",
        "ecr:DescribeRepositories",
        "imagebuilder:GetComponent",
        "imagebuilder:GetImage",
        "imagebuilder:TagResource",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext",
        "s3:GetObject",
        "s3:ListBucket",
        "ssm:GetParameter"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateDistributionConfiguration.html",
      "name": "CreateDistributionConfiguration",
      "description": "Grants permission to create a new distribution configuration",
      "access": "Write",
      "resources": [
        {
          "name": "distributionConfiguration",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "ec2:CreateLaunchTemplateVersion",
        "ec2:DescribeLaunchTemplates",
        "ec2:ModifyLaunchTemplate",
        "imagebuilder:TagResource",
        "s3:ListBucket",
        "ssm:GetParameter"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateImage.html",
      "name": "CreateImage",
      "description": "Grants permission to create a new image",
      "access": "Write",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "ecr:BatchGetRepositoryScanningConfiguration",
        "ecr:DescribeRepositories",
        "iam:CreateServiceLinkedRole",
        "iam:PassRole",
        "imagebuilder:GetContainerRecipe",
        "imagebuilder:GetDistributionConfiguration",
        "imagebuilder:GetImageRecipe",
        "imagebuilder:GetInfrastructureConfiguration",
        "imagebuilder:GetWorkflow",
        "imagebuilder:TagResource",
        "inspector2:BatchGetAccountStatus"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateImagePipeline.html",
      "name": "CreateImagePipeline",
      "description": "Grants permission to create a new image pipeline",
      "access": "Write",
      "resources": [
        {
          "name": "imagePipeline",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "ecr:BatchGetRepositoryScanningConfiguration",
        "ecr:DescribeRepositories",
        "iam:CreateServiceLinkedRole",
        "iam:PassRole",
        "imagebuilder:GetContainerRecipe",
        "imagebuilder:GetDistributionConfiguration",
        "imagebuilder:GetImageRecipe",
        "imagebuilder:GetInfrastructureConfiguration",
        "imagebuilder:GetWorkflow",
        "imagebuilder:TagResource",
        "inspector2:BatchGetAccountStatus"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateImageRecipe.html",
      "name": "CreateImageRecipe",
      "description": "Grants permission to create a new Image Recipe",
      "access": "Write",
      "resources": [
        {
          "name": "imageRecipe",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "ec2:DescribeImages",
        "imagebuilder:GetComponent",
        "imagebuilder:GetImage",
        "imagebuilder:TagResource",
        "ssm:GetParameter"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateInfrastructureConfiguration.html",
      "name": "CreateInfrastructureConfiguration",
      "description": "Grants permission to create a new infrastructure configuration",
      "access": "Write",
      "resources": [
        {
          "name": "infrastructureConfiguration",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "imagebuilder:CreatedResourceTagKeys",
        "imagebuilder:CreatedResourceTag/${TagKey}",
        "imagebuilder:Ec2MetadataHttpTokens",
        "imagebuilder:StatusTopicArn"
      ],
      "dependents": [
        "ec2:DescribeAvailabilityZones",
        "ec2:DescribeHosts",
        "iam:PassRole",
        "imagebuilder:TagResource",
        "resource-groups:GetGroup",
        "sns:Publish"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateLifecyclePolicy.html",
      "name": "CreateLifecyclePolicy",
      "description": "Grants permission to create a new lifecycle policy",
      "access": "Write",
      "resources": [
        {
          "name": "lifecyclePolicy",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "imagebuilder:LifecyclePolicyResourceType"
      ],
      "dependents": [
        "iam:PassRole",
        "imagebuilder:TagResource"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateWorkflow.html",
      "name": "CreateWorkflow",
      "description": "Grants permission to create a new workflow",
      "access": "Write",
      "resources": [
        {
          "name": "workflow",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "imagebuilder:TagResource",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext",
        "s3:GetObject",
        "s3:ListBucket"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteComponent.html",
      "name": "DeleteComponent",
      "description": "Grants permission to delete a component",
      "access": "Write",
      "resources": [
        {
          "name": "component",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteContainerRecipe.html",
      "name": "DeleteContainerRecipe",
      "description": "Grants permission to delete a container recipe",
      "access": "Write",
      "resources": [
        {
          "name": "containerRecipe",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteDistributionConfiguration.html",
      "name": "DeleteDistributionConfiguration",
      "description": "Grants permission to delete a distribution configuration",
      "access": "Write",
      "resources": [
        {
          "name": "distributionConfiguration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteImage.html",
      "name": "DeleteImage",
      "description": "Grants permission to delete an image",
      "access": "Write",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteImagePipeline.html",
      "name": "DeleteImagePipeline",
      "description": "Grants permission to delete an image pipeline",
      "access": "Write",
      "resources": [
        {
          "name": "imagePipeline",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteImageRecipe.html",
      "name": "DeleteImageRecipe",
      "description": "Grants permission to delete an image recipe",
      "access": "Write",
      "resources": [
        {
          "name": "imageRecipe",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteInfrastructureConfiguration.html",
      "name": "DeleteInfrastructureConfiguration",
      "description": "Grants permission to delete an infrastructure configuration",
      "access": "Write",
      "resources": [
        {
          "name": "infrastructureConfiguration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteLifecyclePolicy.html",
      "name": "DeleteLifecyclePolicy",
      "description": "Grants permission to delete a lifecycle policy",
      "access": "Write",
      "resources": [
        {
          "name": "lifecyclePolicy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DeleteWorkflow.html",
      "name": "DeleteWorkflow",
      "description": "Grants permission to delete a workflow",
      "access": "Write",
      "resources": [
        {
          "name": "workflow",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DistributeImage.html",
      "name": "DistributeImage",
      "description": "Grants permission to distribute an image",
      "access": "Write",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "ec2:DescribeImages",
        "iam:PassRole",
        "imagebuilder:GetDistributionConfiguration",
        "imagebuilder:GetImage",
        "imagebuilder:TagResource",
        "ssm:GetParameter"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetComponent.html",
      "name": "GetComponent",
      "description": "Grants permission to view details about a component",
      "access": "Read",
      "resources": [
        {
          "name": "component",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "kms:Decrypt"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetComponentPolicy.html",
      "name": "GetComponentPolicy",
      "description": "Grants permission to view the resource policy associated with a component",
      "access": "Read",
      "resources": [
        {
          "name": "component",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetContainerRecipe.html",
      "name": "GetContainerRecipe",
      "description": "Grants permission to view details about a container recipe",
      "access": "Read",
      "resources": [
        {
          "name": "containerRecipe",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetContainerRecipePolicy.html",
      "name": "GetContainerRecipePolicy",
      "description": "Grants permission to view the resource policy associated with a container recipe",
      "access": "Read",
      "resources": [
        {
          "name": "containerRecipe",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetDistributionConfiguration.html",
      "name": "GetDistributionConfiguration",
      "description": "Grants permission to view details about a distribution configuration",
      "access": "Read",
      "resources": [
        {
          "name": "distributionConfiguration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetImage.html",
      "name": "GetImage",
      "description": "Grants permission to view details about an image",
      "access": "Read",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetImagePipeline.html",
      "name": "GetImagePipeline",
      "description": "Grants permission to view details about an image pipeline",
      "access": "Read",
      "resources": [
        {
          "name": "imagePipeline",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetImagePolicy.html",
      "name": "GetImagePolicy",
      "description": "Grants permission to view the resource policy associated with an image",
      "access": "Read",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetImageRecipe.html",
      "name": "GetImageRecipe",
      "description": "Grants permission to view details about an image recipe",
      "access": "Read",
      "resources": [
        {
          "name": "imageRecipe",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetImageRecipePolicy.html",
      "name": "GetImageRecipePolicy",
      "description": "Grants permission to view the resource policy associated with an image recipe",
      "access": "Read",
      "resources": [
        {
          "name": "imageRecipe",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetInfrastructureConfiguration.html",
      "name": "GetInfrastructureConfiguration",
      "description": "Grants permission to view details about an infrastructure configuration",
      "access": "Read",
      "resources": [
        {
          "name": "infrastructureConfiguration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetLifecycleExecution.html",
      "name": "GetLifecycleExecution",
      "description": "Grants permission to view details about a lifecycle execution",
      "access": "Read",
      "resources": [
        {
          "name": "lifecycleExecution",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetLifecyclePolicy.html",
      "name": "GetLifecyclePolicy",
      "description": "Grants permission to view details about a lifecycle policy",
      "access": "Read",
      "resources": [
        {
          "name": "lifecyclePolicy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetMarketplaceResource.html",
      "name": "GetMarketplaceResource",
      "description": "Grants permission to retrieve Marketplace provided resource",
      "access": "Read",
      "resources": [
        {
          "name": "component",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetWorkflow.html",
      "name": "GetWorkflow",
      "description": "Grants permission to view details about a workflow",
      "access": "Read",
      "resources": [
        {
          "name": "workflow",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "kms:Decrypt"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetWorkflowExecution.html",
      "name": "GetWorkflowExecution",
      "description": "Grants permission to view details about a workflow execution",
      "access": "Read",
      "resources": [
        {
          "name": "workflowExecution",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetWorkflowStepExecution.html",
      "name": "GetWorkflowStepExecution",
      "description": "Grants permission to view details about a workflow step execution",
      "access": "Read",
      "resources": [
        {
          "name": "workflowStepExecution",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "kms:Decrypt"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ImportComponent.html",
      "name": "ImportComponent",
      "description": "Grants permission to import a new component",
      "access": "Write",
      "resources": [
        {
          "name": "component",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "imagebuilder:TagResource",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext",
        "s3:GetObject",
        "s3:ListBucket"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ImportDiskImage.html",
      "name": "ImportDiskImage",
      "description": "Grants permission to import a disk image",
      "access": "Write",
      "resources": [
        {
          "name": "imageVersion",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "iam:CreateServiceLinkedRole",
        "iam:PassRole",
        "imagebuilder:GetInfrastructureConfiguration",
        "imagebuilder:GetWorkflow",
        "imagebuilder:TagResource",
        "s3:GetObject",
        "s3:ListBucket"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ImportVmImage.html",
      "name": "ImportVmImage",
      "description": "Grants permission to import an image",
      "access": "Write",
      "resources": [
        {
          "name": "imageVersion",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "ec2:DescribeImages",
        "ec2:DescribeImportImageTasks",
        "iam:CreateServiceLinkedRole",
        "imagebuilder:TagResource"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListComponentBuildVersions.html",
      "name": "ListComponentBuildVersions",
      "description": "Grants permission to list the component build versions in your account",
      "access": "List",
      "resources": [
        {
          "name": "allComponentBuildVersions",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListComponents.html",
      "name": "ListComponents",
      "description": "Grants permission to list the component versions owned by or shared with your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListContainerRecipes.html",
      "name": "ListContainerRecipes",
      "description": "Grants permission to list the container recipes owned by or shared with your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListDistributionConfigurations.html",
      "name": "ListDistributionConfigurations",
      "description": "Grants permission to list the distribution configurations in your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListImageBuildVersions.html",
      "name": "ListImageBuildVersions",
      "description": "Grants permission to list the image build versions in your account",
      "access": "List",
      "resources": [
        {
          "name": "allImageBuildVersions",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListImagePackages.html",
      "name": "ListImagePackages",
      "description": "Grants permission to return a list of packages installed on the specified image",
      "access": "List",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListImagePipelineImages.html",
      "name": "ListImagePipelineImages",
      "description": "Grants permission to return a list of images created by the specified pipeline",
      "access": "List",
      "resources": [
        {
          "name": "imagePipeline",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListImagePipelines.html",
      "name": "ListImagePipelines",
      "description": "Grants permission to list the image pipelines in your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListImageRecipes.html",
      "name": "ListImageRecipes",
      "description": "Grants permission to list the image recipes owned by or shared with your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListImageScanFindingAggregations.html",
      "name": "ListImageScanFindingAggregations",
      "description": "Grants permission to list aggregations on the image scan findings in your account",
      "access": "List",
      "resources": [
        {
          "name": "image",
          "is_required": false
        },
        {
          "name": "imagePipeline",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListImageScanFindings.html",
      "name": "ListImageScanFindings",
      "description": "Grants permission to list the image scan findings for the images in your account",
      "access": "List",
      "resources": [
        {
          "name": "image",
          "is_required": false
        },
        {
          "name": "imagePipeline",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": [
        "inspector2:ListFindings"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListImages.html",
      "name": "ListImages",
      "description": "Grants permission to list the image versions owned by or shared with your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListInfrastructureConfigurations.html",
      "name": "ListInfrastructureConfigurations",
      "description": "Grants permission to list the infrastructure configurations in your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListLifecycleExecutionResources.html",
      "name": "ListLifecycleExecutionResources",
      "description": "Grants permission to list resources for the specified lifecycle execution",
      "access": "List",
      "resources": [
        {
          "name": "lifecycleExecution",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListLifecycleExecutions.html",
      "name": "ListLifecycleExecutions",
      "description": "Grants permission to list lifecycle executions for the specified resource",
      "access": "List",
      "resources": [
        {
          "name": "image",
          "is_required": false
        },
        {
          "name": "lifecyclePolicy",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListLifecyclePolicies.html",
      "name": "ListLifecyclePolicies",
      "description": "Grants permission to list the lifecycle policies in your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list tags for an Image Builder resource",
      "access": "Read",
      "resources": [
        {
          "name": "component",
          "is_required": false
        },
        {
          "name": "containerRecipe",
          "is_required": false
        },
        {
          "name": "distributionConfiguration",
          "is_required": false
        },
        {
          "name": "image",
          "is_required": false
        },
        {
          "name": "imagePipeline",
          "is_required": false
        },
        {
          "name": "imageRecipe",
          "is_required": false
        },
        {
          "name": "infrastructureConfiguration",
          "is_required": false
        },
        {
          "name": "lifecyclePolicy",
          "is_required": false
        },
        {
          "name": "workflow",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListWaitingWorkflowSteps.html",
      "name": "ListWaitingWorkflowSteps",
      "description": "Grants permission to list waiting workflow steps for the caller account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListWorkflowBuildVersions.html",
      "name": "ListWorkflowBuildVersions",
      "description": "Grants permission to list the workflow build versions in your account",
      "access": "List",
      "resources": [
        {
          "name": "allWorkflowBuildVersions",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListWorkflowExecutions.html",
      "name": "ListWorkflowExecutions",
      "description": "Grants permission to list workflow executions for the specified image",
      "access": "List",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListWorkflowStepExecutions.html",
      "name": "ListWorkflowStepExecutions",
      "description": "Grants permission to list workflow step executions for the specified workflow",
      "access": "List",
      "resources": [
        {
          "name": "workflowExecution",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "kms:Decrypt"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListWorkflows.html",
      "name": "ListWorkflows",
      "description": "Grants permission to list the workflow versions owned by or shared with your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_PutComponentPolicy.html",
      "name": "PutComponentPolicy",
      "description": "Grants permission to set the resource policy associated with a component",
      "access": "Permissions management",
      "resources": [
        {
          "name": "component",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_PutContainerRecipePolicy.html",
      "name": "PutContainerRecipePolicy",
      "description": "Grants permission to set the resource policy associated with a container recipe",
      "access": "Permissions management",
      "resources": [
        {
          "name": "containerRecipe",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_PutImagePolicy.html",
      "name": "PutImagePolicy",
      "description": "Grants permission to set the resource policy associated with an image",
      "access": "Permissions management",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_PutImageRecipePolicy.html",
      "name": "PutImageRecipePolicy",
      "description": "Grants permission to set the resource policy associated with an image recipe",
      "access": "Permissions management",
      "resources": [
        {
          "name": "imageRecipe",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_RetryImage.html",
      "name": "RetryImage",
      "description": "Grants permission to retry an image creation",
      "access": "Write",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_SendWorkflowStepAction.html",
      "name": "SendWorkflowStepAction",
      "description": "Grants permission to send an action to a workflow step",
      "access": "Write",
      "resources": [
        {
          "name": "image",
          "is_required": true
        },
        {
          "name": "workflowStepExecution",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_StartImagePipelineExecution.html",
      "name": "StartImagePipelineExecution",
      "description": "Grants permission to create a new image from a pipeline",
      "access": "Write",
      "resources": [
        {
          "name": "imagePipeline",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "iam:CreateServiceLinkedRole",
        "imagebuilder:GetImagePipeline",
        "imagebuilder:TagResource"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_StartResourceStateUpdate.html",
      "name": "StartResourceStateUpdate",
      "description": "Grants permission to start a state update for the specified resource",
      "access": "Write",
      "resources": [
        {
          "name": "image",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to tag an Image Builder resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "component",
          "is_required": false
        },
        {
          "name": "containerRecipe",
          "is_required": false
        },
        {
          "name": "distributionConfiguration",
          "is_required": false
        },
        {
          "name": "image",
          "is_required": false
        },
        {
          "name": "imagePipeline",
          "is_required": false
        },
        {
          "name": "imageRecipe",
          "is_required": false
        },
        {
          "name": "infrastructureConfiguration",
          "is_required": false
        },
        {
          "name": "lifecyclePolicy",
          "is_required": false
        },
        {
          "name": "workflow",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys",
        "aws:RequestTag/${TagKey}"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to untag an Image Builder resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "component",
          "is_required": false
        },
        {
          "name": "containerRecipe",
          "is_required": false
        },
        {
          "name": "distributionConfiguration",
          "is_required": false
        },
        {
          "name": "image",
          "is_required": false
        },
        {
          "name": "imagePipeline",
          "is_required": false
        },
        {
          "name": "imageRecipe",
          "is_required": false
        },
        {
          "name": "infrastructureConfiguration",
          "is_required": false
        },
        {
          "name": "lifecyclePolicy",
          "is_required": false
        },
        {
          "name": "workflow",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_UpdateDistributionConfiguration.html",
      "name": "UpdateDistributionConfiguration",
      "description": "Grants permission to update an existing distribution configuration",
      "access": "Write",
      "resources": [
        {
          "name": "distributionConfiguration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "ec2:CreateLaunchTemplateVersion",
        "ec2:DescribeLaunchTemplates",
        "ec2:ModifyLaunchTemplate",
        "s3:ListBucket",
        "ssm:GetParameter"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_UpdateImagePipeline.html",
      "name": "UpdateImagePipeline",
      "description": "Grants permission to update an existing image pipeline",
      "access": "Write",
      "resources": [
        {
          "name": "imagePipeline",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "ecr:BatchGetRepositoryScanningConfiguration",
        "ecr:DescribeRepositories",
        "iam:CreateServiceLinkedRole",
        "iam:PassRole",
        "imagebuilder:GetContainerRecipe",
        "imagebuilder:GetDistributionConfiguration",
        "imagebuilder:GetImageRecipe",
        "imagebuilder:GetInfrastructureConfiguration",
        "imagebuilder:GetWorkflow",
        "inspector2:BatchGetAccountStatus"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_UpdateInfrastructureConfiguration.html",
      "name": "UpdateInfrastructureConfiguration",
      "description": "Grants permission to update an existing infrastructure configuration",
      "access": "Write",
      "resources": [
        {
          "name": "infrastructureConfiguration",
          "is_required": true
        }
      ],
      "conditions": [
        "imagebuilder:CreatedResourceTagKeys",
        "imagebuilder:CreatedResourceTag/${TagKey}",
        "imagebuilder:Ec2MetadataHttpTokens",
        "imagebuilder:StatusTopicArn"
      ],
      "dependents": [
        "ec2:DescribeAvailabilityZones",
        "ec2:DescribeHosts",
        "iam:PassRole",
        "resource-groups:GetGroup",
        "sns:Publish"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_UpdateLifecyclePolicy.html",
      "name": "UpdateLifecyclePolicy",
      "description": "Grants permission to update an existing lifecycle policy",
      "access": "Write",
      "resources": [
        {
          "name": "lifecyclePolicy",
          "is_required": true
        }
      ],
      "conditions": [
        "imagebuilder:LifecyclePolicyResourceType"
      ],
      "dependents": [
        "iam:PassRole"
      ]
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_Component.html",
      "name": "component",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:component/${ComponentName}/${ComponentVersion}/${ComponentBuildVersion}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DistributionConfiguration.html",
      "name": "distributionConfiguration",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:distribution-configuration/${DistributionConfigurationName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_Image.html",
      "name": "image",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:image/${ImageName}/${ImageVersion}/${ImageBuildVersion}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ImageVersion.html",
      "name": "imageVersion",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:image/${ImageName}/${ImageVersion}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ImageRecipe.html",
      "name": "imageRecipe",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:image-recipe/${ImageRecipeName}/${ImageRecipeVersion}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ContainerRecipe.html",
      "name": "containerRecipe",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:container-recipe/${ContainerRecipeName}/${ContainerRecipeVersion}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ImagePipeline.html",
      "name": "imagePipeline",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/${ImagePipelineName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_InfrastructureConfiguration.html",
      "name": "infrastructureConfiguration",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:infrastructure-configuration/${ResourceId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_LifecycleExecution.html",
      "name": "lifecycleExecution",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-execution/${LifecycleExecutionId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_LifecyclePolicy.html",
      "name": "lifecyclePolicy",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-policy/${LifecyclePolicyName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_Workflow.html",
      "name": "workflow",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow/${WorkflowType}/${WorkflowName}/${WorkflowVersion}/${WorkflowBuildVersion}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_WorkflowExecutionMetadata.html",
      "name": "workflowExecution",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow-execution/${WorkflowExecutionId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_WorkflowStepMetadata.html",
      "name": "workflowStepExecution",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow-step-execution/${WorkflowStepExecutionId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_Component.html",
      "name": "allComponentBuildVersions",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:component/${ComponentName}/${ComponentVersion}/*",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_Image.html",
      "name": "allImageBuildVersions",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:image/${ImageName}/${ImageVersion}/*",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_Workflow.html",
      "name": "allWorkflowBuildVersions",
      "arn": "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow/${WorkflowType}/${WorkflowName}/${WorkflowVersion}/*",
      "conditions": []
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by the presence of tag key-value pairs in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by tag key-value pairs attached to the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by the presence of tag keys in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/userguide/security_iam_service-with-iam.html#image-builder-security-createdresourcetag",
      "name": "imagebuilder:CreatedResourceTag/${TagKey}",
      "description": "Filters access by the tag key-value pairs attached to the resource created by Image Builder",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/userguide/security_iam_service-with-iam.html#image-builder-security-createdresourcetagkeys",
      "name": "imagebuilder:CreatedResourceTagKeys",
      "description": "Filters access by the presence of tag keys in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/userguide/security_iam_service-with-iam.html#image-builder-security-ec2metadatatokens",
      "name": "imagebuilder:Ec2MetadataHttpTokens",
      "description": "Filters access by the EC2 Instance Metadata HTTP Token Requirement specified in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/userguide/security_iam_service-with-iam.html#image-builder-security-lifecyclepolicyresourcetype",
      "name": "imagebuilder:LifecyclePolicyResourceType",
      "description": "Filters access by the Lifecycle Policy Resource Type specified in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/imagebuilder/latest/userguide/security_iam_service-with-iam.html#image-builder-security-statustopicarn",
      "name": "imagebuilder:StatusTopicArn",
      "description": "Filters access by the SNS Topic Arn in the request to which terminal state notifications will be published",
      "type": "ARN"
    }
  ]
}