{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
  "name": "AWS IoT",
  "prefix": "iot",
  "timestamp": "1781568006",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_AcceptCertificateTransfer.html",
      "name": "AcceptCertificateTransfer",
      "description": "Grants permission to accept a pending certificate transfer",
      "access": "Write",
      "resources": [
        {
          "name": "cert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_AddThingToBillingGroup.html",
      "name": "AddThingToBillingGroup",
      "description": "Grants permission to add a thing to the specified billing group",
      "access": "Write",
      "resources": [
        {
          "name": "billinggroup",
          "is_required": true
        },
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_AddThingToThingGroup.html",
      "name": "AddThingToThingGroup",
      "description": "Grants permission to add a thing to the specified thing group",
      "access": "Write",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        },
        {
          "name": "thinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_AssociateSbomWithPackageVersion.html",
      "name": "AssociateSbomWithPackageVersion",
      "description": "Grants permission to associate SBOM files to a package version",
      "access": "Write",
      "resources": [
        {
          "name": "packageversion",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "iot:GetIndexingConfiguration"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_AssociateTargetsWithJob.html",
      "name": "AssociateTargetsWithJob",
      "description": "Grants permission to associate a group with a continuous job",
      "access": "Write",
      "resources": [
        {
          "name": "job",
          "is_required": true
        },
        {
          "name": "thing",
          "is_required": true
        },
        {
          "name": "thinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_AttachPolicy.html",
      "name": "AttachPolicy",
      "description": "Grants permission to attach a policy to the specified target",
      "access": "Permissions management",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        },
        {
          "name": "thinggroup",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_AttachPrincipalPolicy.html",
      "name": "AttachPrincipalPolicy",
      "description": "Grants permission to attach the specified policy to the specified principal (certificate or other credential)",
      "access": "Permissions management",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_AttachSecurityProfile.html",
      "name": "AttachSecurityProfile",
      "description": "Grants permission to associate a Device Defender security profile with a thing group or with this account",
      "access": "Write",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": true
        },
        {
          "name": "custommetric",
          "is_required": false
        },
        {
          "name": "dimension",
          "is_required": false
        },
        {
          "name": "thinggroup",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_AttachThingPrincipal.html",
      "name": "AttachThingPrincipal",
      "description": "Grants permission to attach the specified principal to the specified thing",
      "access": "Write",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        }
      ],
      "conditions": [
        "iot:thingArn"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CancelAuditMitigationActionsTask.html",
      "name": "CancelAuditMitigationActionsTask",
      "description": "Grants permission to cancel a mitigation action task that is in progress",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CancelAuditTask.html",
      "name": "CancelAuditTask",
      "description": "Grants permission to cancel an audit that is in progress. The audit can be either scheduled or on-demand",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CancelCertificateTransfer.html",
      "name": "CancelCertificateTransfer",
      "description": "Grants permission to cancel a pending transfer for the specified certificate",
      "access": "Write",
      "resources": [
        {
          "name": "cert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CancelDetectMitigationActionsTask.html",
      "name": "CancelDetectMitigationActionsTask",
      "description": "Grants permission to cancel a Device Defender ML Detect mitigation action",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CancelJob.html",
      "name": "CancelJob",
      "description": "Grants permission to cancel a job",
      "access": "Write",
      "resources": [
        {
          "name": "job",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CancelJobExecution.html",
      "name": "CancelJobExecution",
      "description": "Grants permission to cancel a job execution on a particular device",
      "access": "Write",
      "resources": [
        {
          "name": "job",
          "is_required": true
        },
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ClearDefaultAuthorizer.html",
      "name": "ClearDefaultAuthorizer",
      "description": "Grants permission to clear the default authorizer",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_iot-secure-tunneling_CloseTunnel.html",
      "name": "CloseTunnel",
      "description": "Grants permission to close a tunnel",
      "access": "Write",
      "resources": [
        {
          "name": "tunnel",
          "is_required": true
        }
      ],
      "conditions": [
        "iot:Delete"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ConfirmTopicRuleDestination.html",
      "name": "ConfirmTopicRuleDestination",
      "description": "Grants permission to confirm a http url TopicRuleDestinationDestination",
      "access": "Write",
      "resources": [
        {
          "name": "destination",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "Connect",
      "description": "Grants permission to connect as the specified client",
      "access": "Write",
      "resources": [
        {
          "name": "client",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateAuditSuppression.html",
      "name": "CreateAuditSuppression",
      "description": "Grants permission to create a Device Defender audit suppression",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateAuthorizer.html",
      "name": "CreateAuthorizer",
      "description": "Grants permission to create an authorizer",
      "access": "Write",
      "resources": [
        {
          "name": "authorizer",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateBillingGroup.html",
      "name": "CreateBillingGroup",
      "description": "Grants permission to create a billing group",
      "access": "Write",
      "resources": [
        {
          "name": "billinggroup",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCertificateFromCsr.html",
      "name": "CreateCertificateFromCsr",
      "description": "Grants permission to create an X.509 certificate using the specified certificate signing request",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCertificateProvider.html",
      "name": "CreateCertificateProvider",
      "description": "Grants permission to create a certificate provider",
      "access": "Write",
      "resources": [
        {
          "name": "certificateprovider",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCommand.html",
      "name": "CreateCommand",
      "description": "Grants permission to create a command that can be used to start new executions against a device",
      "access": "Write",
      "resources": [
        {
          "name": "command",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCustomMetric.html",
      "name": "CreateCustomMetric",
      "description": "Grants permission to create a custom metric for device side metric reporting and monitoring",
      "access": "Write",
      "resources": [
        {
          "name": "custommetric",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateDimension.html",
      "name": "CreateDimension",
      "description": "Grants permission to define a dimension that can be used to to limit the scope of a metric used in a security profile",
      "access": "Write",
      "resources": [
        {
          "name": "dimension",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateDomainConfiguration.html",
      "name": "CreateDomainConfiguration",
      "description": "Grants permission to create a domain configuration",
      "access": "Write",
      "resources": [
        {
          "name": "domainconfiguration",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "iot:DomainName"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateDynamicThingGroup.html",
      "name": "CreateDynamicThingGroup",
      "description": "Grants permission to create a Dynamic Thing Group",
      "access": "Write",
      "resources": [
        {
          "name": "dynamicthinggroup",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateFleetMetric.html",
      "name": "CreateFleetMetric",
      "description": "Grants permission to create a fleet metric",
      "access": "Write",
      "resources": [
        {
          "name": "fleetmetric",
          "is_required": true
        },
        {
          "name": "index",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateJob.html",
      "name": "CreateJob",
      "description": "Grants permission to create a job",
      "access": "Write",
      "resources": [
        {
          "name": "job",
          "is_required": true
        },
        {
          "name": "thing",
          "is_required": true
        },
        {
          "name": "thinggroup",
          "is_required": true
        },
        {
          "name": "jobtemplate",
          "is_required": false
        },
        {
          "name": "package",
          "is_required": false
        },
        {
          "name": "packageversion",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateJobTemplate.html",
      "name": "CreateJobTemplate",
      "description": "Grants permission to create a job template",
      "access": "Write",
      "resources": [
        {
          "name": "jobtemplate",
          "is_required": true
        },
        {
          "name": "job",
          "is_required": false
        },
        {
          "name": "package",
          "is_required": false
        },
        {
          "name": "packageversion",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateKeysAndCertificate.html",
      "name": "CreateKeysAndCertificate",
      "description": "Grants permission to create a 2048 bit RSA key pair and issues an X.509 certificate using the issued public key",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateMitigationAction.html",
      "name": "CreateMitigationAction",
      "description": "Grants permission to define an action that can be applied to audit findings by using StartAuditMitigationActionsTask",
      "access": "Write",
      "resources": [
        {
          "name": "mitigationaction",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateOTAUpdate.html",
      "name": "CreateOTAUpdate",
      "description": "Grants permission to create an OTA update job",
      "access": "Write",
      "resources": [
        {
          "name": "otaupdate",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePackage.html",
      "name": "CreatePackage",
      "description": "Grants permission to create a software package that you can deploy to your devices",
      "access": "Write",
      "resources": [
        {
          "name": "package",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "iot:GetIndexingConfiguration"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePackageVersion.html",
      "name": "CreatePackageVersion",
      "description": "Grants permission to create a version under the specified package",
      "access": "Write",
      "resources": [
        {
          "name": "package",
          "is_required": true
        },
        {
          "name": "packageversion",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "iot:GetIndexingConfiguration",
        "s3:GetObjectVersion"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePolicy.html",
      "name": "CreatePolicy",
      "description": "Grants permission to create an AWS IoT policy",
      "access": "Permissions management",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePolicyVersion.html",
      "name": "CreatePolicyVersion",
      "description": "Grants permission to create a new version of the specified AWS IoT policy",
      "access": "Permissions management",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateProvisioningClaim.html",
      "name": "CreateProvisioningClaim",
      "description": "Grants permission to create a provisioning claim",
      "access": "Write",
      "resources": [
        {
          "name": "provisioningtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateProvisioningTemplate.html",
      "name": "CreateProvisioningTemplate",
      "description": "Grants permission to create a fleet provisioning template",
      "access": "Write",
      "resources": [
        {
          "name": "provisioningtemplate",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "iam:PassRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateProvisioningTemplateVersion.html",
      "name": "CreateProvisioningTemplateVersion",
      "description": "Grants permission to create a new version of a fleet provisioning template",
      "access": "Write",
      "resources": [
        {
          "name": "provisioningtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateRoleAlias.html",
      "name": "CreateRoleAlias",
      "description": "Grants permission to create a role alias",
      "access": "Write",
      "resources": [
        {
          "name": "rolealias",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": [
        "iam:PassRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateScheduledAudit.html",
      "name": "CreateScheduledAudit",
      "description": "Grants permission to create a scheduled audit that is run at a specified time interval",
      "access": "Write",
      "resources": [
        {
          "name": "scheduledaudit",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateSecurityProfile.html",
      "name": "CreateSecurityProfile",
      "description": "Grants permission to create a Device Defender security profile",
      "access": "Write",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": true
        },
        {
          "name": "custommetric",
          "is_required": false
        },
        {
          "name": "dimension",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateStream.html",
      "name": "CreateStream",
      "description": "Grants permission to create a new AWS IoT stream",
      "access": "Write",
      "resources": [
        {
          "name": "stream",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateThing.html",
      "name": "CreateThing",
      "description": "Grants permission to create a thing in the thing registry",
      "access": "Write",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        },
        {
          "name": "billinggroup",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateThingGroup.html",
      "name": "CreateThingGroup",
      "description": "Grants permission to create a thing group",
      "access": "Write",
      "resources": [
        {
          "name": "thinggroup",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateThingType.html",
      "name": "CreateThingType",
      "description": "Grants permission to create a new thing type",
      "access": "Write",
      "resources": [
        {
          "name": "thingtype",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateTopicRule.html",
      "name": "CreateTopicRule",
      "description": "Grants permission to create a rule",
      "access": "Write",
      "resources": [
        {
          "name": "rule",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_CreateTopicRuleDestination.html",
      "name": "CreateTopicRuleDestination",
      "description": "Grants permission to create a TopicRuleDestination",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteAccountAuditConfiguration.html",
      "name": "DeleteAccountAuditConfiguration",
      "description": "Grants permission to delete the audit configuration associated with the account",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteAuditSuppression.html",
      "name": "DeleteAuditSuppression",
      "description": "Grants permission to delete a Device Defender audit suppression",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteAuthorizer.html",
      "name": "DeleteAuthorizer",
      "description": "Grants permission to delete the specified authorizer",
      "access": "Write",
      "resources": [
        {
          "name": "authorizer",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteBillingGroup.html",
      "name": "DeleteBillingGroup",
      "description": "Grants permission to delete the specified billing group",
      "access": "Write",
      "resources": [
        {
          "name": "billinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCACertificate.html",
      "name": "DeleteCACertificate",
      "description": "Grants permission to delete a registered CA certificate",
      "access": "Write",
      "resources": [
        {
          "name": "cacert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCertificate.html",
      "name": "DeleteCertificate",
      "description": "Grants permission to delete the specified certificate",
      "access": "Write",
      "resources": [
        {
          "name": "cert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCertificateProvider.html",
      "name": "DeleteCertificateProvider",
      "description": "Grants permission to delete a certificate provider",
      "access": "Write",
      "resources": [
        {
          "name": "certificateprovider",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCommand.html",
      "name": "DeleteCommand",
      "description": "Grants permission to delete a command",
      "access": "Write",
      "resources": [
        {
          "name": "command",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCommandExecution.html",
      "name": "DeleteCommandExecution",
      "description": "Grants permission to delete a command execution",
      "access": "Write",
      "resources": [
        {
          "name": "client",
          "is_required": false
        },
        {
          "name": "thing",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "DeleteConnection",
      "description": "Grants permission to disconnect the specified connection",
      "access": "Write",
      "resources": [
        {
          "name": "client",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCustomMetric.html",
      "name": "DeleteCustomMetric",
      "description": "Grants permission to deletes the specified custom metric from your AWS account",
      "access": "Write",
      "resources": [
        {
          "name": "custommetric",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteDimension.html",
      "name": "DeleteDimension",
      "description": "Grants permission to remove the specified dimension from your AWS account",
      "access": "Write",
      "resources": [
        {
          "name": "dimension",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteDomainConfiguration.html",
      "name": "DeleteDomainConfiguration",
      "description": "Grants permission to delete a domain configuration",
      "access": "Write",
      "resources": [
        {
          "name": "domainconfiguration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteDynamicThingGroup.html",
      "name": "DeleteDynamicThingGroup",
      "description": "Grants permission to delete the specified Dynamic Thing Group",
      "access": "Write",
      "resources": [
        {
          "name": "dynamicthinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteFleetMetric.html",
      "name": "DeleteFleetMetric",
      "description": "Grants permission to delete the specified fleet metric",
      "access": "Write",
      "resources": [
        {
          "name": "fleetmetric",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteJob.html",
      "name": "DeleteJob",
      "description": "Grants permission to delete a job and its related job executions",
      "access": "Write",
      "resources": [
        {
          "name": "job",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteJobExecution.html",
      "name": "DeleteJobExecution",
      "description": "Grants permission to delete a job execution",
      "access": "Write",
      "resources": [
        {
          "name": "job",
          "is_required": true
        },
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteJobTemplate.html",
      "name": "DeleteJobTemplate",
      "description": "Grants permission to delete a job template",
      "access": "Write",
      "resources": [
        {
          "name": "jobtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteMitigationAction.html",
      "name": "DeleteMitigationAction",
      "description": "Grants permission to delete a defined mitigation action from your AWS account",
      "access": "Write",
      "resources": [
        {
          "name": "mitigationaction",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteOTAUpdate.html",
      "name": "DeleteOTAUpdate",
      "description": "Grants permission to delete an OTA update job",
      "access": "Write",
      "resources": [
        {
          "name": "otaupdate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePackage.html",
      "name": "DeletePackage",
      "description": "Grants permission to delete a package",
      "access": "Write",
      "resources": [
        {
          "name": "package",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePackageVersion.html",
      "name": "DeletePackageVersion",
      "description": "Grants permission to delete a version of the specified package",
      "access": "Write",
      "resources": [
        {
          "name": "package",
          "is_required": true
        },
        {
          "name": "packageversion",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePolicy.html",
      "name": "DeletePolicy",
      "description": "Grants permission to delete the specified policy",
      "access": "Permissions management",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePolicyVersion.html",
      "name": "DeletePolicyVersion",
      "description": "Grants permission to Delete the specified version of the specified policy",
      "access": "Permissions management",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteProvisioningTemplate.html",
      "name": "DeleteProvisioningTemplate",
      "description": "Grants permission to delete a fleet provisioning template",
      "access": "Write",
      "resources": [
        {
          "name": "provisioningtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteProvisioningTemplateVersion.html",
      "name": "DeleteProvisioningTemplateVersion",
      "description": "Grants permission to delete a fleet provisioning template version",
      "access": "Write",
      "resources": [
        {
          "name": "provisioningtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteRegistrationCode.html",
      "name": "DeleteRegistrationCode",
      "description": "Grants permission to delete a CA certificate registration code",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteRoleAlias.html",
      "name": "DeleteRoleAlias",
      "description": "Grants permission to delete the specified role alias",
      "access": "Write",
      "resources": [
        {
          "name": "rolealias",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteScheduledAudit.html",
      "name": "DeleteScheduledAudit",
      "description": "Grants permission to delete a scheduled audit",
      "access": "Write",
      "resources": [
        {
          "name": "scheduledaudit",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteSecurityProfile.html",
      "name": "DeleteSecurityProfile",
      "description": "Grants permission to delete a Device Defender security profile",
      "access": "Write",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": true
        },
        {
          "name": "custommetric",
          "is_required": false
        },
        {
          "name": "dimension",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteStream.html",
      "name": "DeleteStream",
      "description": "Grants permission to delete a specified stream",
      "access": "Write",
      "resources": [
        {
          "name": "stream",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteThing.html",
      "name": "DeleteThing",
      "description": "Grants permission to delete the specified thing",
      "access": "Write",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteThingGroup.html",
      "name": "DeleteThingGroup",
      "description": "Grants permission to delete the specified thing group",
      "access": "Write",
      "resources": [
        {
          "name": "thinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "DeleteThingShadow",
      "description": "Grants permission to delete the specified thing shadow",
      "access": "Write",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteThingType.html",
      "name": "DeleteThingType",
      "description": "Grants permission to delete the specified thing type",
      "access": "Write",
      "resources": [
        {
          "name": "thingtype",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteTopicRule.html",
      "name": "DeleteTopicRule",
      "description": "Grants permission to delete the specified rule",
      "access": "Write",
      "resources": [
        {
          "name": "rule",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteTopicRuleDestination.html",
      "name": "DeleteTopicRuleDestination",
      "description": "Grants permission to delete a TopicRuleDestination",
      "access": "Write",
      "resources": [
        {
          "name": "destination",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteV2LoggingLevel.html",
      "name": "DeleteV2LoggingLevel",
      "description": "Grants permission to delete the specified v2 logging level",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DeprecateThingType.html",
      "name": "DeprecateThingType",
      "description": "Grants permission to deprecate the specified thing type",
      "access": "Write",
      "resources": [
        {
          "name": "thingtype",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAccountAuditConfiguration.html",
      "name": "DescribeAccountAuditConfiguration",
      "description": "Grants permission to get information about audit configurations for the account",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditFinding.html",
      "name": "DescribeAuditFinding",
      "description": "Grants permission to get information about a single audit finding. Properties include the reason for noncompliance, the severity of the issue, and when the audit that returned the finding was started",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditMitigationActionsTask.html",
      "name": "DescribeAuditMitigationActionsTask",
      "description": "Grants permission to get information about an audit mitigation task that is used to apply mitigation actions to a set of audit findings",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditSuppression.html",
      "name": "DescribeAuditSuppression",
      "description": "Grants permission to get information about a Device Defender audit suppression",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditTask.html",
      "name": "DescribeAuditTask",
      "description": "Grants permission to get information about a Device Defender audit",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuthorizer.html",
      "name": "DescribeAuthorizer",
      "description": "Grants permission to describe an authorizer",
      "access": "Read",
      "resources": [
        {
          "name": "authorizer",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeBillingGroup.html",
      "name": "DescribeBillingGroup",
      "description": "Grants permission to get information about the specified billing group",
      "access": "Read",
      "resources": [
        {
          "name": "billinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCACertificate.html",
      "name": "DescribeCACertificate",
      "description": "Grants permission to describe a registered CA certificate",
      "access": "Read",
      "resources": [
        {
          "name": "cacert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCertificate.html",
      "name": "DescribeCertificate",
      "description": "Grants permission to get information about the specified certificate",
      "access": "Read",
      "resources": [
        {
          "name": "cert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCertificateProvider.html",
      "name": "DescribeCertificateProvider",
      "description": "Grants permission to describe a certificate provider",
      "access": "Read",
      "resources": [
        {
          "name": "certificateprovider",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCustomMetric.html",
      "name": "DescribeCustomMetric",
      "description": "Grants permission to describe a custom metric that is defined in your AWS account",
      "access": "Read",
      "resources": [
        {
          "name": "custommetric",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDefaultAuthorizer.html",
      "name": "DescribeDefaultAuthorizer",
      "description": "Grants permission to describe the default authorizer",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDetectMitigationActionsTask.html",
      "name": "DescribeDetectMitigationActionsTask",
      "description": "Grants permission to describe a Device Defender ML Detect mitigation action",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDimension.html",
      "name": "DescribeDimension",
      "description": "Grants permission to get details about a dimension that is defined in your AWS account",
      "access": "Read",
      "resources": [
        {
          "name": "dimension",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDomainConfiguration.html",
      "name": "DescribeDomainConfiguration",
      "description": "Grants permission to get information about the domain configuration",
      "access": "Read",
      "resources": [
        {
          "name": "domainconfiguration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeEncryptionConfiguration.html",
      "name": "DescribeEncryptionConfiguration",
      "description": "Grants permission to describe the encryption configuration for the account",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeEndpoint.html",
      "name": "DescribeEndpoint",
      "description": "Grants permission to get a unique endpoint specific to the AWS account making the call",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeEventConfigurations.html",
      "name": "DescribeEventConfigurations",
      "description": "Grants permission to get account event configurations",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeFleetMetric.html",
      "name": "DescribeFleetMetric",
      "description": "Grants permission to get information about the specified fleet metric",
      "access": "Read",
      "resources": [
        {
          "name": "fleetmetric",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeIndex.html",
      "name": "DescribeIndex",
      "description": "Grants permission to get information about the specified index",
      "access": "Read",
      "resources": [
        {
          "name": "index",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeJob.html",
      "name": "DescribeJob",
      "description": "Grants permission to describe a job",
      "access": "Read",
      "resources": [
        {
          "name": "job",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeJobExecution.html",
      "name": "DescribeJobExecution",
      "description": "Grants permission to describe a job execution",
      "access": "Read",
      "resources": [
        {
          "name": "job",
          "is_required": false
        },
        {
          "name": "thing",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeJobTemplate.html",
      "name": "DescribeJobTemplate",
      "description": "Grants permission to describe a job template",
      "access": "Read",
      "resources": [
        {
          "name": "jobtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeManagedJobTemplate.html",
      "name": "DescribeManagedJobTemplate",
      "description": "Grants permission to describe a managed job template",
      "access": "Read",
      "resources": [
        {
          "name": "jobtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeMitigationAction.html",
      "name": "DescribeMitigationAction",
      "description": "Grants permission to get information about a mitigation action",
      "access": "Read",
      "resources": [
        {
          "name": "mitigationaction",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeProvisioningTemplate.html",
      "name": "DescribeProvisioningTemplate",
      "description": "Grants permission to get information about a fleet provisioning template",
      "access": "Read",
      "resources": [
        {
          "name": "provisioningtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeProvisioningTemplateVersion.html",
      "name": "DescribeProvisioningTemplateVersion",
      "description": "Grants permission to get information about a fleet provisioning template version",
      "access": "Read",
      "resources": [
        {
          "name": "provisioningtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeRoleAlias.html",
      "name": "DescribeRoleAlias",
      "description": "Grants permission to describe a role alias",
      "access": "Read",
      "resources": [
        {
          "name": "rolealias",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeScheduledAudit.html",
      "name": "DescribeScheduledAudit",
      "description": "Grants permission to get information about a scheduled audit",
      "access": "Read",
      "resources": [
        {
          "name": "scheduledaudit",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeSecurityProfile.html",
      "name": "DescribeSecurityProfile",
      "description": "Grants permission to get information about a Device Defender security profile",
      "access": "Read",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeStream.html",
      "name": "DescribeStream",
      "description": "Grants permission to get information about the specified stream",
      "access": "Read",
      "resources": [
        {
          "name": "stream",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThing.html",
      "name": "DescribeThing",
      "description": "Grants permission to get information about the specified thing",
      "access": "Read",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThingGroup.html",
      "name": "DescribeThingGroup",
      "description": "Grants permission to get information about the specified thing group",
      "access": "Read",
      "resources": [
        {
          "name": "thinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThingRegistrationTask.html",
      "name": "DescribeThingRegistrationTask",
      "description": "Grants permission to get information about the bulk thing registration task",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThingType.html",
      "name": "DescribeThingType",
      "description": "Grants permission to get information about the specified thing type",
      "access": "Read",
      "resources": [
        {
          "name": "thingtype",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_iot-secure-tunneling_DescribeTunnel.html",
      "name": "DescribeTunnel",
      "description": "Grants permission to describe a tunnel",
      "access": "Read",
      "resources": [
        {
          "name": "tunnel",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DetachPolicy.html",
      "name": "DetachPolicy",
      "description": "Grants permission to detach a policy from the specified target",
      "access": "Permissions management",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        },
        {
          "name": "thinggroup",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DetachPrincipalPolicy.html",
      "name": "DetachPrincipalPolicy",
      "description": "Grants permission to remove the specified policy from the specified certificate",
      "access": "Permissions management",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DetachSecurityProfile.html",
      "name": "DetachSecurityProfile",
      "description": "Grants permission to disassociate a Device Defender security profile from a thing group or from this account",
      "access": "Write",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": true
        },
        {
          "name": "custommetric",
          "is_required": false
        },
        {
          "name": "dimension",
          "is_required": false
        },
        {
          "name": "thinggroup",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DetachThingPrincipal.html",
      "name": "DetachThingPrincipal",
      "description": "Grants permission to detach the specified principal from the specified thing",
      "access": "Write",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        }
      ],
      "conditions": [
        "iot:thingArn"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DisableTopicRule.html",
      "name": "DisableTopicRule",
      "description": "Grants permission to disable the specified rule",
      "access": "Write",
      "resources": [
        {
          "name": "rule",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_DisassociateSbomFromPackageVersion.html",
      "name": "DisassociateSbomFromPackageVersion",
      "description": "Grants permission to disassociate SBOM files from a package version",
      "access": "Write",
      "resources": [
        {
          "name": "packageversion",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_EnableTopicRule.html",
      "name": "EnableTopicRule",
      "description": "Grants permission to enable the specified rule",
      "access": "Write",
      "resources": [
        {
          "name": "rule",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetBehaviorModelTrainingSummaries.html",
      "name": "GetBehaviorModelTrainingSummaries",
      "description": "Grants permission to fetch a Device Defender's ML Detect Security Profile training model's status",
      "access": "List",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetBucketsAggregation.html",
      "name": "GetBucketsAggregation",
      "description": "Grants permission to get buckets aggregation for IoT fleet index",
      "access": "Read",
      "resources": [
        {
          "name": "index",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetCardinality.html",
      "name": "GetCardinality",
      "description": "Grants permission to get cardinality for IoT fleet index",
      "access": "Read",
      "resources": [
        {
          "name": "index",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetCommand.html",
      "name": "GetCommand",
      "description": "Grants permission to get the information about the command",
      "access": "Read",
      "resources": [
        {
          "name": "command",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetCommandExecution.html",
      "name": "GetCommandExecution",
      "description": "Grants permission to get the information of a command execution",
      "access": "Read",
      "resources": [
        {
          "name": "client",
          "is_required": false
        },
        {
          "name": "thing",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "GetConnection",
      "description": "Grants permission to retrieve the specified connection information",
      "access": "Write",
      "resources": [
        {
          "name": "client",
          "is_required": true
        }
      ],
      "conditions": [
        "iot:IncludeSocketInformation"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetEffectivePolicies.html",
      "name": "GetEffectivePolicies",
      "description": "Grants permission to get effective policies",
      "access": "Read",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetIndexingConfiguration.html",
      "name": "GetIndexingConfiguration",
      "description": "Grants permission to get current fleet indexing configuration",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetJobDocument.html",
      "name": "GetJobDocument",
      "description": "Grants permission to get a job document",
      "access": "Read",
      "resources": [
        {
          "name": "job",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetLoggingOptions.html",
      "name": "GetLoggingOptions",
      "description": "Grants permission to get the logging options",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetOTAUpdate.html",
      "name": "GetOTAUpdate",
      "description": "Grants permission to get the information about the OTA update job",
      "access": "Read",
      "resources": [
        {
          "name": "otaupdate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetPackage.html",
      "name": "GetPackage",
      "description": "Grants permission to get the information about the package",
      "access": "Read",
      "resources": [
        {
          "name": "package",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetPackageConfiguration.html",
      "name": "GetPackageConfiguration",
      "description": "Grants permission to get the package configuration of the account",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetPackageVersion.html",
      "name": "GetPackageVersion",
      "description": "Grants permission to get the version of the package",
      "access": "Read",
      "resources": [
        {
          "name": "package",
          "is_required": true
        },
        {
          "name": "packageversion",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetPercentiles.html",
      "name": "GetPercentiles",
      "description": "Grants permission to get percentiles for IoT fleet index",
      "access": "Read",
      "resources": [
        {
          "name": "index",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetPolicy.html",
      "name": "GetPolicy",
      "description": "Grants permission to get information about the specified policy with the policy document of the default version",
      "access": "Read",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetPolicyVersion.html",
      "name": "GetPolicyVersion",
      "description": "Grants permission to get information about the specified policy version",
      "access": "Read",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetRegistrationCode.html",
      "name": "GetRegistrationCode",
      "description": "Grants permission to get a registration code used to register a CA certificate with AWS IoT",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "GetRetainedMessage",
      "description": "Grants permission to get the retained message on the specified topic",
      "access": "Read",
      "resources": [
        {
          "name": "topic",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetStatistics.html",
      "name": "GetStatistics",
      "description": "Grants permission to get statistics for IoT fleet index",
      "access": "Read",
      "resources": [
        {
          "name": "index",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetThingConnectivityData.html",
      "name": "GetThingConnectivityData",
      "description": "Grants permission to get the thing's connectivity data",
      "access": "Read",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [
        "iot:IncludeSocketInformation"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "GetThingShadow",
      "description": "Grants permission to get the thing shadow",
      "access": "Read",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetTopicRule.html",
      "name": "GetTopicRule",
      "description": "Grants permission to get information about the specified rule",
      "access": "Read",
      "resources": [
        {
          "name": "rule",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetTopicRuleDestination.html",
      "name": "GetTopicRuleDestination",
      "description": "Grants permission to get a TopicRuleDestination",
      "access": "Read",
      "resources": [
        {
          "name": "destination",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_GetV2LoggingOptions.html",
      "name": "GetV2LoggingOptions",
      "description": "Grants permission to get v2 logging options",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListActiveViolations.html",
      "name": "ListActiveViolations",
      "description": "Grants permission to list the active violations for a given Device Defender security profile or Thing",
      "access": "List",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": false
        },
        {
          "name": "thing",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListAttachedPolicies.html",
      "name": "ListAttachedPolicies",
      "description": "Grants permission to list the policies attached to the specified thing group",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditFindings.html",
      "name": "ListAuditFindings",
      "description": "Grants permission to list the findings (results) of a Device Defender audit or of the audits performed during a specified time period",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditMitigationActionsExecutions.html",
      "name": "ListAuditMitigationActionsExecutions",
      "description": "Grants permission to get the status of audit mitigation action tasks that were executed",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditMitigationActionsTasks.html",
      "name": "ListAuditMitigationActionsTasks",
      "description": "Grants permission to get a list of audit mitigation action tasks that match the specified filters",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditSuppressions.html",
      "name": "ListAuditSuppressions",
      "description": "Grants permission to list your Device Defender audit suppressions",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditTasks.html",
      "name": "ListAuditTasks",
      "description": "Grants permission to list the Device Defender audits that have been performed during a given time period",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuthorizers.html",
      "name": "ListAuthorizers",
      "description": "Grants permission to list the authorizers registered in your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListBillingGroups.html",
      "name": "ListBillingGroups",
      "description": "Grants permission to list all billing groups",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListCACertificates.html",
      "name": "ListCACertificates",
      "description": "Grants permission to list the CA certificates registered for your AWS account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListCertificateProviders.html",
      "name": "ListCertificateProviders",
      "description": "Grants permission to list certificate providers in the account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListCertificates.html",
      "name": "ListCertificates",
      "description": "Grants permission to list your certificates",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListCertificatesByCA.html",
      "name": "ListCertificatesByCA",
      "description": "Grants permission to list the device certificates signed by the specified CA certificate",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListCommandExecutions.html",
      "name": "ListCommandExecutions",
      "description": "Grants permission to list commands executions in the account",
      "access": "List",
      "resources": [
        {
          "name": "client",
          "is_required": false
        },
        {
          "name": "command",
          "is_required": false
        },
        {
          "name": "thing",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListCommands.html",
      "name": "ListCommands",
      "description": "Grants permission to list commands in the account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListCustomMetrics.html",
      "name": "ListCustomMetrics",
      "description": "Grants permission to list the custom metrics in your AWS account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListDetectMitigationActionsExecutions.html",
      "name": "ListDetectMitigationActionsExecutions",
      "description": "Grants permission to lists mitigation actions executions for a Device Defender ML Detect Security Profile",
      "access": "List",
      "resources": [
        {
          "name": "thing",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListDetectMitigationActionsTasks.html",
      "name": "ListDetectMitigationActionsTasks",
      "description": "Grants permission to list Device Defender ML Detect mitigation actions tasks",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListDimensions.html",
      "name": "ListDimensions",
      "description": "Grants permission to list the dimensions that are defined for your AWS account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListDomainConfigurations.html",
      "name": "ListDomainConfigurations",
      "description": "Grants permission to list the domain configuration created by your AWS account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListFleetMetrics.html",
      "name": "ListFleetMetrics",
      "description": "Grants permission to list the fleet metrics in your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListIndices.html",
      "name": "ListIndices",
      "description": "Grants permission to list all indices for fleet index",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobExecutionsForJob.html",
      "name": "ListJobExecutionsForJob",
      "description": "Grants permission to list the job executions for a job",
      "access": "List",
      "resources": [
        {
          "name": "job",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobExecutionsForThing.html",
      "name": "ListJobExecutionsForThing",
      "description": "Grants permission to list the job executions for the specified thing",
      "access": "List",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobTemplates.html",
      "name": "ListJobTemplates",
      "description": "Grants permission to list job templates",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobs.html",
      "name": "ListJobs",
      "description": "Grants permission to list jobs",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListManagedJobTemplates.html",
      "name": "ListManagedJobTemplates",
      "description": "Grants permission to list managed job templates",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListMetricValues.html",
      "name": "ListMetricValues",
      "description": "Grants permissions to list the metric values for a thing based on the metricName, and dimension if specified",
      "access": "List",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListMitigationActions.html",
      "name": "ListMitigationActions",
      "description": "Grants permission to get a list of all mitigation actions that match the specified filter criteria",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListNamedShadowsForThing.html",
      "name": "ListNamedShadowsForThing",
      "description": "Grants permission to list all named shadows for a given thing",
      "access": "List",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListOTAUpdates.html",
      "name": "ListOTAUpdates",
      "description": "Grants permission to list OTA update jobs in the account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListOutgoingCertificates.html",
      "name": "ListOutgoingCertificates",
      "description": "Grants permission to list certificates that are being transfered but not yet accepted",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListPackageVersions.html",
      "name": "ListPackageVersions",
      "description": "Grants permission to list versions for a package in the account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListPackages.html",
      "name": "ListPackages",
      "description": "Grants permission to list packages in the account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListPolicies.html",
      "name": "ListPolicies",
      "description": "Grants permission to list your policies",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListPolicyPrincipals.html",
      "name": "ListPolicyPrincipals",
      "description": "Grants permission to list the principals associated with the specified policy",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListPolicyVersions.html",
      "name": "ListPolicyVersions",
      "description": "Grants permission to list the versions of the specified policy, and identifies the default version",
      "access": "List",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListPrincipalPolicies.html",
      "name": "ListPrincipalPolicies",
      "description": "Grants permission to list the policies attached to the specified principal. If you use an Amazon Cognito identity, the ID needs to be in Amazon Cognito Identity format",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListPrincipalThings.html",
      "name": "ListPrincipalThings",
      "description": "Grants permission to list the things associated with the specified principal",
      "access": "List",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListPrincipalThingsV2.html",
      "name": "ListPrincipalThingsV2",
      "description": "Grants permission to list the things associated with the specified principal",
      "access": "List",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListProvisioningTemplateVersions.html",
      "name": "ListProvisioningTemplateVersions",
      "description": "Grants permission to get a list of fleet provisioning template versions",
      "access": "List",
      "resources": [
        {
          "name": "provisioningtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListProvisioningTemplates.html",
      "name": "ListProvisioningTemplates",
      "description": "Grants permission to list the fleet provisioning templates in your AWS account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListRelatedResourcesForAuditFinding.html",
      "name": "ListRelatedResourcesForAuditFinding",
      "description": "Grants permission to list related resources for a single audit finding",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "ListRetainedMessages",
      "description": "Grants permission to list the retained messages for your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListRoleAliases.html",
      "name": "ListRoleAliases",
      "description": "Grants permission to list role aliases",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListSbomValidationResults.html",
      "name": "ListSbomValidationResults",
      "description": "Grants permission to list SBOM validation results of a package version",
      "access": "List",
      "resources": [
        {
          "name": "packageversion",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListScheduledAudits.html",
      "name": "ListScheduledAudits",
      "description": "Grants permission to list all of your scheduled audits",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListSecurityProfiles.html",
      "name": "ListSecurityProfiles",
      "description": "Grants permission to list the Device Defender security profiles you have created",
      "access": "List",
      "resources": [
        {
          "name": "custommetric",
          "is_required": false
        },
        {
          "name": "dimension",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListSecurityProfilesForTarget.html",
      "name": "ListSecurityProfilesForTarget",
      "description": "Grants permission to list the Device Defender security profiles attached to a target",
      "access": "List",
      "resources": [
        {
          "name": "thinggroup",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListStreams.html",
      "name": "ListStreams",
      "description": "Grants permission to list the streams in your account",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "ListSubscriptions",
      "description": "Grants permission to retrieve the specified connection's subscriptions",
      "access": "Write",
      "resources": [
        {
          "name": "client",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list all tags for a given resource",
      "access": "Read",
      "resources": [
        {
          "name": "authorizer",
          "is_required": false
        },
        {
          "name": "billinggroup",
          "is_required": false
        },
        {
          "name": "cacert",
          "is_required": false
        },
        {
          "name": "certificateprovider",
          "is_required": false
        },
        {
          "name": "command",
          "is_required": false
        },
        {
          "name": "custommetric",
          "is_required": false
        },
        {
          "name": "dimension",
          "is_required": false
        },
        {
          "name": "domainconfiguration",
          "is_required": false
        },
        {
          "name": "dynamicthinggroup",
          "is_required": false
        },
        {
          "name": "fleetmetric",
          "is_required": false
        },
        {
          "name": "job",
          "is_required": false
        },
        {
          "name": "jobtemplate",
          "is_required": false
        },
        {
          "name": "mitigationaction",
          "is_required": false
        },
        {
          "name": "otaupdate",
          "is_required": false
        },
        {
          "name": "policy",
          "is_required": false
        },
        {
          "name": "provisioningtemplate",
          "is_required": false
        },
        {
          "name": "rolealias",
          "is_required": false
        },
        {
          "name": "rule",
          "is_required": false
        },
        {
          "name": "scheduledaudit",
          "is_required": false
        },
        {
          "name": "securityprofile",
          "is_required": false
        },
        {
          "name": "stream",
          "is_required": false
        },
        {
          "name": "thinggroup",
          "is_required": false
        },
        {
          "name": "thingtype",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListTargetsForPolicy.html",
      "name": "ListTargetsForPolicy",
      "description": "Grants permission to list targets for the specified policy",
      "access": "List",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListTargetsForSecurityProfile.html",
      "name": "ListTargetsForSecurityProfile",
      "description": "Grants permission to list the targets associated with a given Device Defender security profile",
      "access": "List",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThingGroups.html",
      "name": "ListThingGroups",
      "description": "Grants permission to list all thing groups",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThingGroupsForThing.html",
      "name": "ListThingGroupsForThing",
      "description": "Grants permission to list thing groups to which the specified thing belongs",
      "access": "List",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThingPrincipals.html",
      "name": "ListThingPrincipals",
      "description": "Grants permission to list the principals associated with the specified thing",
      "access": "List",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThingPrincipalsV2.html",
      "name": "ListThingPrincipalsV2",
      "description": "Grants permission to list the principals associated with the specified thing",
      "access": "List",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThingRegistrationTaskReports.html",
      "name": "ListThingRegistrationTaskReports",
      "description": "Grants permission to list information about bulk thing registration tasks",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThingRegistrationTasks.html",
      "name": "ListThingRegistrationTasks",
      "description": "Grants permission to list bulk thing registration tasks",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThingTypes.html",
      "name": "ListThingTypes",
      "description": "Grants permission to list all thing types",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThings.html",
      "name": "ListThings",
      "description": "Grants permission to list all things",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThingsInBillingGroup.html",
      "name": "ListThingsInBillingGroup",
      "description": "Grants permission to list all things in the specified billing group",
      "access": "List",
      "resources": [
        {
          "name": "billinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListThingsInThingGroup.html",
      "name": "ListThingsInThingGroup",
      "description": "Grants permission to list all things in the specified thing group",
      "access": "List",
      "resources": [
        {
          "name": "thinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListTopicRuleDestinations.html",
      "name": "ListTopicRuleDestinations",
      "description": "Grants permission to list all TopicRuleDestinations",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListTopicRules.html",
      "name": "ListTopicRules",
      "description": "Grants permission to list the rules for the specific topic",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_iot-secure-tunneling_ListTunnels.html",
      "name": "ListTunnels",
      "description": "Grants permission to list tunnels",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListV2LoggingLevels.html",
      "name": "ListV2LoggingLevels",
      "description": "Grants permission to list the v2 logging levels",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListViolationEvents.html",
      "name": "ListViolationEvents",
      "description": "Grants permission to list the Device Defender security profile violations discovered during the given time period",
      "access": "List",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": false
        },
        {
          "name": "thing",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_iot-secure-tunneling_OpenTunnel.html",
      "name": "OpenTunnel",
      "description": "Grants permission to open a tunnel",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "iot:ThingGroupArn",
        "iot:TunnelDestinationService"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "Publish",
      "description": "Grants permission to publish to the specified topic",
      "access": "Write",
      "resources": [
        {
          "name": "topic",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_PutVerificationStateOnViolation.html",
      "name": "PutVerificationStateOnViolation",
      "description": "Grants permission to put verification state on a violation",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "Receive",
      "description": "Grants permission to receive from the specified topic",
      "access": "Write",
      "resources": [
        {
          "name": "topic",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_RegisterCACertificate.html",
      "name": "RegisterCACertificate",
      "description": "Grants permission to register a CA certificate with AWS IoT",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "aws:ResourceTag/${TagKey}"
      ],
      "dependents": [
        "iam:PassRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_RegisterCertificate.html",
      "name": "RegisterCertificate",
      "description": "Grants permission to register a device certificate with AWS IoT",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_RegisterCertificateWithoutCA.html",
      "name": "RegisterCertificateWithoutCA",
      "description": "Grants permission to register a device certificate with AWS IoT without a registered CA (certificate authority)",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_RegisterThing.html",
      "name": "RegisterThing",
      "description": "Grants permission to register your thing",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_RejectCertificateTransfer.html",
      "name": "RejectCertificateTransfer",
      "description": "Grants permission to reject a pending certificate transfer",
      "access": "Write",
      "resources": [
        {
          "name": "cert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_RemoveThingFromBillingGroup.html",
      "name": "RemoveThingFromBillingGroup",
      "description": "Grants permission to remove thing from the specified billing group",
      "access": "Write",
      "resources": [
        {
          "name": "billinggroup",
          "is_required": true
        },
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_RemoveThingFromThingGroup.html",
      "name": "RemoveThingFromThingGroup",
      "description": "Grants permission to remove thing from the specified thing group",
      "access": "Write",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        },
        {
          "name": "thinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ReplaceTopicRule.html",
      "name": "ReplaceTopicRule",
      "description": "Grants permission to replace the specified rule",
      "access": "Write",
      "resources": [
        {
          "name": "rule",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "RetainPublish",
      "description": "Grants permission to publish a retained message to the specified topic",
      "access": "Write",
      "resources": [
        {
          "name": "topic",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_iot-secure-tunneling_RotateTunnelAccessToken.html",
      "name": "RotateTunnelAccessToken",
      "description": "Grants permission to rotate the access token of a tunnel",
      "access": "Write",
      "resources": [
        {
          "name": "tunnel",
          "is_required": true
        }
      ],
      "conditions": [
        "iot:ThingGroupArn",
        "iot:TunnelDestinationService",
        "iot:ClientMode"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_SearchIndex.html",
      "name": "SearchIndex",
      "description": "Grants permission to search IoT fleet index",
      "access": "Read",
      "resources": [
        {
          "name": "index",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "SendDirectMessage",
      "description": "Grants permission to send a direct message to an IoT client",
      "access": "Write",
      "resources": [
        {
          "name": "client",
          "is_required": true
        }
      ],
      "conditions": [
        "iot:Topic"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_SetDefaultAuthorizer.html",
      "name": "SetDefaultAuthorizer",
      "description": "Grants permission to set the default authorizer. This will be used if a websocket connection is made without specifying an authorizer",
      "access": "Permissions management",
      "resources": [
        {
          "name": "authorizer",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_SetDefaultPolicyVersion.html",
      "name": "SetDefaultPolicyVersion",
      "description": "Grants permission to set the specified version of the specified policy as the policy's default (operative) version",
      "access": "Permissions management",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_SetLoggingOptions.html",
      "name": "SetLoggingOptions",
      "description": "Grants permission to set the logging options",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_SetV2LoggingLevel.html",
      "name": "SetV2LoggingLevel",
      "description": "Grants permission to set the v2 logging level",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_SetV2LoggingOptions.html",
      "name": "SetV2LoggingOptions",
      "description": "Grants permission to set the v2 logging options",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_StartAuditMitigationActionsTask.html",
      "name": "StartAuditMitigationActionsTask",
      "description": "Grants permission to start a task that applies a set of mitigation actions to the specified target",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_iot-jobs-data_StartCommandExecution.html",
      "name": "StartCommandExecution",
      "description": "Grants permission to start a new command execution",
      "access": "Write",
      "resources": [
        {
          "name": "command",
          "is_required": true
        },
        {
          "name": "client",
          "is_required": false
        },
        {
          "name": "thing",
          "is_required": false
        }
      ],
      "conditions": [
        "iot:CommandExecutionParameterString/${CommandParameterName}",
        "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
        "iot:CommandExecutionParameterNumber/${CommandParameterName}"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_StartDetectMitigationActionsTask.html",
      "name": "StartDetectMitigationActionsTask",
      "description": "Grants permission to start a Device Defender ML Detect mitigation actions task",
      "access": "Write",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_StartOnDemandAuditTask.html",
      "name": "StartOnDemandAuditTask",
      "description": "Grants permission to start an on-demand Device Defender audit",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_StartThingRegistrationTask.html",
      "name": "StartThingRegistrationTask",
      "description": "Grants permission to start a bulk thing registration task",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_StopThingRegistrationTask.html",
      "name": "StopThingRegistrationTask",
      "description": "Grants permission to stop a bulk thing registration task",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "Subscribe",
      "description": "Grants permission to subscribe to the specified TopicFilter",
      "access": "Write",
      "resources": [
        {
          "name": "topicfilter",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to tag a specified resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "authorizer",
          "is_required": false
        },
        {
          "name": "billinggroup",
          "is_required": false
        },
        {
          "name": "cacert",
          "is_required": false
        },
        {
          "name": "certificateprovider",
          "is_required": false
        },
        {
          "name": "command",
          "is_required": false
        },
        {
          "name": "custommetric",
          "is_required": false
        },
        {
          "name": "dimension",
          "is_required": false
        },
        {
          "name": "domainconfiguration",
          "is_required": false
        },
        {
          "name": "dynamicthinggroup",
          "is_required": false
        },
        {
          "name": "fleetmetric",
          "is_required": false
        },
        {
          "name": "job",
          "is_required": false
        },
        {
          "name": "jobtemplate",
          "is_required": false
        },
        {
          "name": "mitigationaction",
          "is_required": false
        },
        {
          "name": "otaupdate",
          "is_required": false
        },
        {
          "name": "package",
          "is_required": false
        },
        {
          "name": "packageversion",
          "is_required": false
        },
        {
          "name": "policy",
          "is_required": false
        },
        {
          "name": "provisioningtemplate",
          "is_required": false
        },
        {
          "name": "rolealias",
          "is_required": false
        },
        {
          "name": "rule",
          "is_required": false
        },
        {
          "name": "scheduledaudit",
          "is_required": false
        },
        {
          "name": "securityprofile",
          "is_required": false
        },
        {
          "name": "stream",
          "is_required": false
        },
        {
          "name": "thinggroup",
          "is_required": false
        },
        {
          "name": "thingtype",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_TestAuthorization.html",
      "name": "TestAuthorization",
      "description": "Grants permission to test the policies evaluation for group policies",
      "access": "Read",
      "resources": [
        {
          "name": "cert",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_TestInvokeAuthorizer.html",
      "name": "TestInvokeAuthorizer",
      "description": "Grants permission to test invoke the specified custom authorizer for testing purposes",
      "access": "Read",
      "resources": [
        {
          "name": "authorizer",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_TransferCertificate.html",
      "name": "TransferCertificate",
      "description": "Grants permission to transfer the specified certificate to the specified AWS account",
      "access": "Write",
      "resources": [
        {
          "name": "cert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to untag a specified resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "authorizer",
          "is_required": false
        },
        {
          "name": "billinggroup",
          "is_required": false
        },
        {
          "name": "cacert",
          "is_required": false
        },
        {
          "name": "certificateprovider",
          "is_required": false
        },
        {
          "name": "command",
          "is_required": false
        },
        {
          "name": "custommetric",
          "is_required": false
        },
        {
          "name": "dimension",
          "is_required": false
        },
        {
          "name": "domainconfiguration",
          "is_required": false
        },
        {
          "name": "dynamicthinggroup",
          "is_required": false
        },
        {
          "name": "fleetmetric",
          "is_required": false
        },
        {
          "name": "job",
          "is_required": false
        },
        {
          "name": "jobtemplate",
          "is_required": false
        },
        {
          "name": "mitigationaction",
          "is_required": false
        },
        {
          "name": "otaupdate",
          "is_required": false
        },
        {
          "name": "package",
          "is_required": false
        },
        {
          "name": "packageversion",
          "is_required": false
        },
        {
          "name": "policy",
          "is_required": false
        },
        {
          "name": "provisioningtemplate",
          "is_required": false
        },
        {
          "name": "rolealias",
          "is_required": false
        },
        {
          "name": "rule",
          "is_required": false
        },
        {
          "name": "scheduledaudit",
          "is_required": false
        },
        {
          "name": "securityprofile",
          "is_required": false
        },
        {
          "name": "stream",
          "is_required": false
        },
        {
          "name": "thinggroup",
          "is_required": false
        },
        {
          "name": "thingtype",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateAccountAuditConfiguration.html",
      "name": "UpdateAccountAuditConfiguration",
      "description": "Grants permission to configure or reconfigure the Device Defender audit settings for this account",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateAuditSuppression.html",
      "name": "UpdateAuditSuppression",
      "description": "Grants permission to update a Device Defender audit suppression",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateAuthorizer.html",
      "name": "UpdateAuthorizer",
      "description": "Grants permission to update an authorizer",
      "access": "Write",
      "resources": [
        {
          "name": "authorizer",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateBillingGroup.html",
      "name": "UpdateBillingGroup",
      "description": "Grants permission to update information associated with the specified billing group",
      "access": "Write",
      "resources": [
        {
          "name": "billinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateCACertificate.html",
      "name": "UpdateCACertificate",
      "description": "Grants permission to update a registered CA certificate",
      "access": "Write",
      "resources": [
        {
          "name": "cacert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "iam:PassRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateCertificate.html",
      "name": "UpdateCertificate",
      "description": "Grants permission to update the status of the specified certificate. This operation is idempotent",
      "access": "Write",
      "resources": [
        {
          "name": "cert",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateCertificateProvider.html",
      "name": "UpdateCertificateProvider",
      "description": "Grants permission to update a certificate provider",
      "access": "Write",
      "resources": [
        {
          "name": "certificateprovider",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateCommand.html",
      "name": "UpdateCommand",
      "description": "Grants permission to update a command",
      "access": "Write",
      "resources": [
        {
          "name": "command",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateCustomMetric.html",
      "name": "UpdateCustomMetric",
      "description": "Grants permission to update the specified custom metric",
      "access": "Write",
      "resources": [
        {
          "name": "custommetric",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateDimension.html",
      "name": "UpdateDimension",
      "description": "Grants permission to update the definition for a dimension",
      "access": "Write",
      "resources": [
        {
          "name": "dimension",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateDomainConfiguration.html",
      "name": "UpdateDomainConfiguration",
      "description": "Grants permission to update a domain configuration",
      "access": "Write",
      "resources": [
        {
          "name": "domainconfiguration",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateDynamicThingGroup.html",
      "name": "UpdateDynamicThingGroup",
      "description": "Grants permission to update a Dynamic Thing Group",
      "access": "Write",
      "resources": [
        {
          "name": "dynamicthinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateEncryptionConfiguration.html",
      "name": "UpdateEncryptionConfiguration",
      "description": "Grants permission to update the encryption configuration for the account",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateEventConfigurations.html",
      "name": "UpdateEventConfigurations",
      "description": "Grants permission to update event configurations",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateFleetMetric.html",
      "name": "UpdateFleetMetric",
      "description": "Grants permission to update a fleet metric",
      "access": "Write",
      "resources": [
        {
          "name": "fleetmetric",
          "is_required": true
        },
        {
          "name": "index",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateIndexingConfiguration.html",
      "name": "UpdateIndexingConfiguration",
      "description": "Grants permission to update fleet indexing configuration",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateJob.html",
      "name": "UpdateJob",
      "description": "Grants permission to update a job",
      "access": "Write",
      "resources": [
        {
          "name": "job",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateMitigationAction.html",
      "name": "UpdateMitigationAction",
      "description": "Grants permission to update the definition for the specified mitigation action",
      "access": "Write",
      "resources": [
        {
          "name": "mitigationaction",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdatePackage.html",
      "name": "UpdatePackage",
      "description": "Grants permission to update a package",
      "access": "Write",
      "resources": [
        {
          "name": "package",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "iot:GetIndexingConfiguration"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdatePackageConfiguration.html",
      "name": "UpdatePackageConfiguration",
      "description": "Grants permission to update the package configuration of the account",
      "access": "Write",
      "resources": [],
      "conditions": [],
      "dependents": [
        "iam:PassRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdatePackageVersion.html",
      "name": "UpdatePackageVersion",
      "description": "Grants permission to update the version of the specified package",
      "access": "Write",
      "resources": [
        {
          "name": "package",
          "is_required": true
        },
        {
          "name": "packageversion",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "iot:GetIndexingConfiguration",
        "s3:GetObjectVersion"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateProvisioningTemplate.html",
      "name": "UpdateProvisioningTemplate",
      "description": "Grants permission to update a fleet provisioning template",
      "access": "Write",
      "resources": [
        {
          "name": "provisioningtemplate",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "iam:PassRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateRoleAlias.html",
      "name": "UpdateRoleAlias",
      "description": "Grants permission to update the role alias",
      "access": "Write",
      "resources": [
        {
          "name": "rolealias",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": [
        "iam:PassRole"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateScheduledAudit.html",
      "name": "UpdateScheduledAudit",
      "description": "Grants permission to update a scheduled audit, including what checks are performed and how often the audit takes place",
      "access": "Write",
      "resources": [
        {
          "name": "scheduledaudit",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateSecurityProfile.html",
      "name": "UpdateSecurityProfile",
      "description": "Grants permission to update a Device Defender security profile",
      "access": "Write",
      "resources": [
        {
          "name": "securityprofile",
          "is_required": true
        },
        {
          "name": "custommetric",
          "is_required": false
        },
        {
          "name": "dimension",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateStream.html",
      "name": "UpdateStream",
      "description": "Grants permission to update the data for a stream",
      "access": "Write",
      "resources": [
        {
          "name": "stream",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateThing.html",
      "name": "UpdateThing",
      "description": "Grants permission to update information associated with the specified thing",
      "access": "Write",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateThingGroup.html",
      "name": "UpdateThingGroup",
      "description": "Grants permission to update information associated with the specified thing group",
      "access": "Write",
      "resources": [
        {
          "name": "thinggroup",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateThingGroupsForThing.html",
      "name": "UpdateThingGroupsForThing",
      "description": "Grants permission to update the thing groups to which the thing belongs",
      "access": "Write",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        },
        {
          "name": "thinggroup",
          "is_required": false
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html",
      "name": "UpdateThingShadow",
      "description": "Grants permission to update the thing shadow",
      "access": "Write",
      "resources": [
        {
          "name": "thing",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateThingType.html",
      "name": "UpdateThingType",
      "description": "Grants permission to update information associated with the specified thing type",
      "access": "Write",
      "resources": [
        {
          "name": "thingtype",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_UpdateTopicRuleDestination.html",
      "name": "UpdateTopicRuleDestination",
      "description": "Grants permission to update a TopicRuleDestination",
      "access": "Write",
      "resources": [
        {
          "name": "destination",
          "is_required": true
        }
      ],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/apireference/API_ValidateSecurityProfileBehaviors.html",
      "name": "ValidateSecurityProfileBehaviors",
      "description": "Grants permission to validate a Device Defender security profile behaviors specification",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/iot-message-broker.html",
      "name": "client",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:client/${ClientId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/iot-indexing.html",
      "name": "index",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:index/${IndexName}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/iot-indexing.html",
      "name": "fleetmetric",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:fleetmetric/${FleetMetricName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/iot-jobs.html",
      "name": "job",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:job/${JobId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/job-templates.html",
      "name": "jobtemplate",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:jobtemplate/${JobTemplateId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/iot-tunnels.html",
      "name": "tunnel",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:tunnel/${TunnelId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/thing-registry.html",
      "name": "thing",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:thing/${ThingName}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/thing-groups.html",
      "name": "thinggroup",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:thinggroup/${ThingGroupName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/billing-groups.html",
      "name": "billinggroup",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:billinggroup/${BillingGroupName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/dynamic-thing-groups.html",
      "name": "dynamicthinggroup",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:thinggroup/${ThingGroupName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/thing-types.html",
      "name": "thingtype",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:thingtype/${ThingTypeName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/iot-message-broker.html",
      "name": "topic",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:topic/${TopicName}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/topics.html",
      "name": "topicfilter",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:topicfilter/${TopicFilter}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/authorizing-direct-aws.html",
      "name": "rolealias",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:rolealias/${RoleAlias}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/custom-authorizer.html",
      "name": "authorizer",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:authorizer/${AuthorizerName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/iot-policies.html",
      "name": "policy",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:policy/${PolicyName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/x509-certs.html",
      "name": "cert",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:cert/${Certificate}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/x509-certs.html",
      "name": "cacert",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:cacert/${CACertificate}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/freertos/latest/userguide/freertos-ota-dev.html",
      "name": "stream",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:stream/${StreamId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/freertos/latest/userguide/freertos-ota-dev.html",
      "name": "otaupdate",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:otaupdate/${OtaUpdateId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/device-defender-audit.html",
      "name": "scheduledaudit",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:scheduledaudit/${ScheduleName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/device-defender-mitigation-actions.html",
      "name": "mitigationaction",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:mitigationaction/${MitigationActionName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/device-defender-detect.html",
      "name": "securityprofile",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:securityprofile/${SecurityProfileName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/device-defender-detect.html",
      "name": "custommetric",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:custommetric/${MetricName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/device-defender-detect.html",
      "name": "dimension",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:dimension/${DimensionName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/iot-rules.html",
      "name": "rule",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:rule/${RuleName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/rule-destination.html",
      "name": "destination",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:ruledestination/${DestinationType}/${Uuid}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/provision-template.html",
      "name": "provisioningtemplate",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/${ProvisioningTemplate}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/domain-configuration.html",
      "name": "domainconfiguration",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/${DomainConfigurationName}/${Id}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/software-package-catalog.html",
      "name": "package",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:package/${PackageName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/software-package-catalog.html",
      "name": "packageversion",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:package/${PackageName}/version/${VersionName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/provisioning-cert-provider.html",
      "name": "certificateprovider",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:certificateprovider/${CertificateProviderName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/iot/latest/developerguide/iot-remote-command.html",
      "name": "command",
      "arn": "arn:${Partition}:iot:${Region}:${Account}:command/${CommandId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by a tag key that is present in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by a tag key component of a tag associated to the IoT resource in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html",
      "name": "aws:TagKeys",
      "description": "Filters access by a list of tag keys associated to the IoT resource in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:ClientMode",
      "description": "Filters access by the mode of the client for IoT Tunnel",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
      "description": "Filters access by the command parameter name and boolean value",
      "type": "Bool"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:CommandExecutionParameterNumber/${CommandParameterName}",
      "description": "Filters access by the command parameter name and numeric value",
      "type": "Numeric"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:CommandExecutionParameterString/${CommandParameterName}",
      "description": "Filters access by the command parameter name and string value",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:Delete",
      "description": "Filters access by a flag indicating whether or not to also delete an IoT Tunnel immediately when making iot:CloseTunnel request",
      "type": "Bool"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:DomainName",
      "description": "Filters access by based on the domain name of an IoT DomainConfiguration",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:IncludeSocketInformation",
      "description": "Filters access by GetConnection and GetThingConnectivityData includeSocketInformation request parameter",
      "type": "Bool"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:ThingGroupArn",
      "description": "Filters access by a list of IoT Thing Group ARNs that the destination IoT Thing belongs to for an IoT Tunnel",
      "type": "ArrayOfARN"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:Topic",
      "description": "Filters access by based on the topic",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:TunnelDestinationService",
      "description": "Filters access by a list of destination services for an IoT Tunnel",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
      "name": "iot:thingArn",
      "description": "Filters access by the ARN of an IoT Thing",
      "type": "ARN"
    }
  ]
}