{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_multi-partyapproval.html",
  "name": "Multi-party approval",
  "prefix": "mpa",
  "timestamp": "1781568006",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_CancelSession.html",
      "name": "CancelSession",
      "description": "Grants permission to cancel an approval session",
      "access": "Write",
      "resources": [
        {
          "name": "session",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}",
        "mpa:RequestedOperation",
        "mpa:ProtectedResourceAccount"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_CreateApprovalTeam.html",
      "name": "CreateApprovalTeam",
      "description": "Grants permission to create an approval team",
      "access": "Write",
      "resources": [
        {
          "name": "approval-team",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_CreateIdentitySource.html",
      "name": "CreateIdentitySource",
      "description": "Grants permission to create an identity source",
      "access": "Write",
      "resources": [
        {
          "name": "identity-source",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_DeleteIdentitySource.html",
      "name": "DeleteIdentitySource",
      "description": "Grants permission to delete an identity source",
      "access": "Write",
      "resources": [
        {
          "name": "identity-source",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_DeleteInactiveApprovalTeamVersion.html",
      "name": "DeleteInactiveApprovalTeamVersion",
      "description": "Grants permission to delete an inactive approval team",
      "access": "Write",
      "resources": [
        {
          "name": "approval-team",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_DeleteResourcePolicy.html",
      "name": "DeleteResourcePolicy",
      "description": "Grants permission to delete a resource policy",
      "access": "Permissions management",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetApprovalTeam.html",
      "name": "GetApprovalTeam",
      "description": "Grants permission to retrieve details for an approval team",
      "access": "Read",
      "resources": [
        {
          "name": "approval-team",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetIdentitySource.html",
      "name": "GetIdentitySource",
      "description": "Grants permission to retrieve details for an identity source",
      "access": "Read",
      "resources": [
        {
          "name": "identity-source",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetPolicyVersion.html",
      "name": "GetPolicyVersion",
      "description": "Grants permission to retrieve details for a policy",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetResourcePolicy.html",
      "name": "GetResourcePolicy",
      "description": "Grants permission to retrieve details for a specific resource",
      "access": "Read",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetSession.html",
      "name": "GetSession",
      "description": "Grants permission to retrieve details for an approval session",
      "access": "Read",
      "resources": [
        {
          "name": "session",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}",
        "mpa:RequestedOperation",
        "mpa:ProtectedResourceAccount"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListApprovalTeams.html",
      "name": "ListApprovalTeams",
      "description": "Grants permission to list approval teams",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListIdentitySources.html",
      "name": "ListIdentitySources",
      "description": "Grants permission to list identity sources",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListPolicies.html",
      "name": "ListPolicies",
      "description": "Grants permission to list policies",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListPolicyVersions.html",
      "name": "ListPolicyVersions",
      "description": "Grants permission to list the versions for policies",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListResourcePolicies.html",
      "name": "ListResourcePolicies",
      "description": "Grants permission to list policies for a resource",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListSessions.html",
      "name": "ListSessions",
      "description": "Grants permission to list approval sessions",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list tags for a resource",
      "access": "List",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_PutResourcePolicy.html",
      "name": "PutResourcePolicy",
      "description": "Grants permission to create or update policies for a resource",
      "access": "Permissions management",
      "resources": [],
      "conditions": [],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_StartActiveApprovalTeamDeletion.html",
      "name": "StartActiveApprovalTeamDeletion",
      "description": "Grants permission to start the deletion process for an active approval team",
      "access": "Write",
      "resources": [
        {
          "name": "approval-team",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_StartApprovalTeamBaseline.html",
      "name": "StartApprovalTeamBaseline",
      "description": "Grants permission to start a baseline for an active approval team",
      "access": "Write",
      "resources": [
        {
          "name": "approval-team",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_StartSessionInternal.html",
      "name": "StartSession",
      "description": "Grants permission to start an approval session",
      "access": "Write",
      "resources": [
        {
          "name": "session",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}",
        "mpa:RequestedOperation",
        "mpa:ProtectedResourceAccount"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to tag a resource",
      "access": "Tagging",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to untag a resource",
      "access": "Tagging",
      "resources": [],
      "conditions": [
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ],
      "dependents": []
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_UpdateApprovalTeam.html",
      "name": "UpdateApprovalTeam",
      "description": "Grants permission to update approval team",
      "access": "Write",
      "resources": [
        {
          "name": "approval-team",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ],
      "dependents": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
      "name": "approval-team",
      "arn": "arn:${Partition}:mpa:${Region}:${Account}:approval-team/${ApprovalTeamId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
      "name": "identity-source",
      "arn": "arn:${Partition}:mpa:${Region}:${Account}:identity-source/${IdentitySourceId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
      "name": "session",
      "arn": "arn:${Partition}:mpa:${Region}:${Account}:session/${SessionId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by a tag key and value pair that is allowed in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by a tag key and value pair of a resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by a list of tag keys that are allowed in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
      "name": "mpa:ProtectedResourceAccount",
      "description": "Filters access by the account that owns the resource that is the target of the operation that requires approval",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
      "name": "mpa:RequestedOperation",
      "description": "Filters access by a requested operation that requires team approval before it can be executed",
      "type": "String"
    }
  ]
}