{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_q.html",
  "name": "Amazon Q",
  "prefix": "q",
  "timestamp": "1786363206",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "AssociateConnectorResource",
      "description": "Grants permission to associate an AWS resource with an Amazon Q connector",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "AssociateLoginDomain",
      "description": "Grants permission to associate a login domain with an Amazon Q Developer Profile",
      "access": "Write",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "BatchDescribeGroups",
      "description": "Grants permission to describe multiple groups for an Amazon Q Developer Profile",
      "access": "Read",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "BatchDescribeUsers",
      "description": "Grants permission to describe multiple users for an Amazon Q Developer Profile",
      "access": "Read",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "BatchGetGroups",
      "description": "Grants permission to get multiple groups for an Amazon Q Developer Profile",
      "access": "Read",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "BatchGetUsers",
      "description": "Grants permission to get multiple users for an Amazon Q Developer Profile",
      "access": "Read",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "CreateArtifact",
      "description": "Grants permission to create an artifact with Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "CreateAssignment",
      "description": "Grants permission to create a user or group assignment for an Amazon Q Developer Profile",
      "access": "Write",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": [
        "identitystore:GroupId",
        "identitystore:UserId"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "CreateAuthGrant",
      "description": "Grants permission to create OAuth user in Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "CreateOAuthAppConnection",
      "description": "Grants permission to register an OAuth application in Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "CreatePlugin",
      "description": "Grants permission to create and configure a third party plugin in Amazon Q",
      "access": "Write",
      "resources": [
        {
          "name": "plugin",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "CreateScimAccessToken",
      "description": "Grants permission to create a SCIM access token for an Amazon Q Developer Profile",
      "access": "Write",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "DeleteAssignment",
      "description": "Grants permission to delete a user or group assignment for an Amazon Q Developer Profile",
      "access": "Write",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": [
        "identitystore:GroupId",
        "identitystore:UserId"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "DeleteConversation",
      "description": "Grants permission to delete a conversation with Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "DeleteOAuthAppConnection",
      "description": "Grants permission to delete an OAuth application in Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "DeletePlugin",
      "description": "Grants permission to delete a configured plugin in Amazon Q",
      "access": "Write",
      "resources": [
        {
          "name": "plugin",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "DeleteScimAccessToken",
      "description": "Grants permission to delete a SCIM access token for an Amazon Q Developer Profile",
      "access": "Write",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "DisassociateLoginDomain",
      "description": "Grants permission to disassociate a login domain from an Amazon Q Developer Profile",
      "access": "Write",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "GenerateCodeFromCommands",
      "description": "Grants permission to generate code from CLI commands in Amazon Q",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "GenerateCodeRecommendations",
      "description": "Grants permission to generate code recommendations in Amazon Q",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "GetArtifact",
      "description": "Grants permission to view an Amazon Q artifact",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "GetArtifactActionResult",
      "description": "Grants permission to view results of an action in an Amazon Q artifact",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "GetConnector",
      "description": "Grants permission to view information about a specific Amazon Q connector",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "GetConversation",
      "description": "Grants permission to get individual messages associated with a specific conversation with Amazon Q",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "GetIdentityMetadata",
      "description": "Grants permission to Amazon Q to get the identity metadata",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "GetPlugin",
      "description": "Grants permission to view information about a specific configured Amazon Q plugin",
      "access": "Read",
      "resources": [
        {
          "name": "plugin",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "GetTroubleshootingResults",
      "description": "Grants permission to get troubleshooting results with Amazon Q",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "ListConversations",
      "description": "Grants permission to list individual conversations associated with a specific Amazon Q user",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "ListDashboardMetrics",
      "description": "Grants permission to read metrics to populate Amazon Q dashboard",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "ListGroups",
      "description": "Grants permission to list groups for an Amazon Q Developer Profile",
      "access": "List",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "ListLoginDomains",
      "description": "Grants permission to list login domains for an Amazon Q Developer Profile",
      "access": "List",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "ListPluginProviders",
      "description": "Grants permission to list available plugins in Amazon Q",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "ListPlugins",
      "description": "Grants permission to list configured plugins in Amazon Q",
      "access": "List",
      "resources": [
        {
          "name": "plugin",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "ListScimAccessTokens",
      "description": "Grants permission to list SCIM access tokens for an Amazon Q Developer Profile",
      "access": "List",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list all tags associated with an Amazon Q resource",
      "access": "List",
      "resources": [
        {
          "name": "plugin",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "ListUsers",
      "description": "Grants permission to list users for an Amazon Q Developer Profile",
      "access": "List",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "PassRequest",
      "description": "Grants permission to allow Amazon Q to perform actions on your behalf",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "PerformArtifactAction",
      "description": "Grants permission to perform an action in an Amazon Q artifact",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "RejectConnector",
      "description": "Grants permission to reject a connection request for an Amazon Q connector",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "SendEvent",
      "description": "Grants permission to trigger asynchronous Amazon Q actions",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "SendMessage",
      "description": "Grants permission to send a message to Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "StartConversation",
      "description": "Grants permission to start a conversation with Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "StartTroubleshootingAnalysis",
      "description": "Grants permission to start a troubleshooting analysis with Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "StartTroubleshootingResolutionExplanation",
      "description": "Grants permission to start a troubleshooting resolution explanation with Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "TagResource",
      "description": "Grants permission to associate tags with an Amazon Q resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "plugin",
          "is_required": false
        },
        {
          "name": "profile",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "UntagResource",
      "description": "Grants permission to remove tags associated with an Amazon Q resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "plugin",
          "is_required": false
        },
        {
          "name": "profile",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "UpdateAssignment",
      "description": "Grants permission to update a user or group assignment for an Amazon Q Developer Profile",
      "access": "Write",
      "resources": [
        {
          "name": "profile",
          "is_required": true
        }
      ],
      "conditions": [
        "identitystore:GroupId",
        "identitystore:UserId"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "UpdateAuthGrant",
      "description": "Grants permission to update OAuth user in Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "UpdateConversation",
      "description": "Grants permission to update a conversation with Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "UpdateOAuthAppConnection",
      "description": "Grants permission to update an OAuth application in Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "UpdatePlugin",
      "description": "Grants permission to update a third party plugin in Amazon Q",
      "access": "Write",
      "resources": [
        {
          "name": "plugin",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "UpdateTroubleshootingCommandResult",
      "description": "Grants permission to update a troubleshooting command result with Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "UsePlugin",
      "description": "Grants permission to use Amazon Q plugins",
      "access": "Write",
      "resources": [
        {
          "name": "plugin",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.html",
      "name": "VerifyOAuthAppConnection",
      "description": "Grants permission to verify an OAuth application in Amazon Q",
      "access": "Write",
      "resources": [],
      "conditions": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/plugins.html",
      "name": "plugin",
      "arn": "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/${Identifier}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/as-whisper-admin.html#about-profiles",
      "name": "profile",
      "arn": "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/${Identifier}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security-iam-service-with-iam.html",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by the tags that are passed in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security-iam-service-with-iam.html",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by the tags associated with the Amazon Q resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security-iam-service-with-iam.html",
      "name": "aws:TagKeys",
      "description": "Filters access by the tag keys that are passed in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security-iam-service-with-iam.html",
      "name": "identitystore:GroupId",
      "description": "Filters access by IAM Identity Center Group ID",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security-iam-service-with-iam.html",
      "name": "identitystore:UserId",
      "description": "Filters access by IAM Identity Center User ID",
      "type": "ArrayOfString"
    }
  ]
}