{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_wafv2.html",
  "name": "AWS WAF V2",
  "prefix": "wafv2",
  "timestamp": "1786363206",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_AssociateWebACL.html",
      "name": "AssociateWebACL",
      "description": "Grants permission to associate a WebACL with a resource",
      "access": "Write",
      "resources": [
        {
          "name": "agentcore-gateway",
          "is_required": false
        },
        {
          "name": "amplify-app",
          "is_required": false
        },
        {
          "name": "apigateway",
          "is_required": false
        },
        {
          "name": "apprunner",
          "is_required": false
        },
        {
          "name": "appsync",
          "is_required": false
        },
        {
          "name": "loadbalancer/app/",
          "is_required": false
        },
        {
          "name": "userpool",
          "is_required": false
        },
        {
          "name": "verified-access-instance",
          "is_required": false
        },
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_CheckCapacity.html",
      "name": "CheckCapacity",
      "description": "Grants permission to calculate web ACL capacity unit (WCU) requirements for a specified scope and set of rules",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_CreateAPIKey.html",
      "name": "CreateAPIKey",
      "description": "Grants permission to create an API key for use in the integration of the CAPTCHA API in your JavaScript client applications",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_CreateIPSet.html",
      "name": "CreateIPSet",
      "description": "Grants permission to create an IPSet",
      "access": "Write",
      "resources": [
        {
          "name": "ipset",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_CreateRegexPatternSet.html",
      "name": "CreateRegexPatternSet",
      "description": "Grants permission to create a RegexPatternSet",
      "access": "Write",
      "resources": [
        {
          "name": "regexpatternset",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_CreateRuleGroup.html",
      "name": "CreateRuleGroup",
      "description": "Grants permission to create a RuleGroup",
      "access": "Write",
      "resources": [
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "regexpatternset",
          "is_required": false
        },
        {
          "name": "rulegroup",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_CreateWebACL.html",
      "name": "CreateWebACL",
      "description": "Grants permission to create a WebACL",
      "access": "Write",
      "resources": [
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "managedruleset",
          "is_required": false
        },
        {
          "name": "regexpatternset",
          "is_required": false
        },
        {
          "name": "rulegroup",
          "is_required": false
        },
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DeleteAPIKey.html",
      "name": "DeleteAPIKey",
      "description": "Grants permission to delete an API key",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DeleteFirewallManagerRuleGroups.html",
      "name": "DeleteFirewallManagerRuleGroups",
      "description": "Grants permission to delete FirewallManagedRulesGroups from a WebACL if not managed by Firewall Manager anymore",
      "access": "Write",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DeleteIPSet.html",
      "name": "DeleteIPSet",
      "description": "Grants permission to delete an IPSet",
      "access": "Write",
      "resources": [
        {
          "name": "ipset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DeleteLoggingConfiguration.html",
      "name": "DeleteLoggingConfiguration",
      "description": "Grants permission to delete the LoggingConfiguration from a WebACL",
      "access": "Write",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": [
        "wafv2:LogScope"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DeletePermissionPolicy.html",
      "name": "DeletePermissionPolicy",
      "description": "Grants permission to delete the PermissionPolicy on a RuleGroup",
      "access": "Permissions management",
      "resources": [
        {
          "name": "rulegroup",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DeleteRegexPatternSet.html",
      "name": "DeleteRegexPatternSet",
      "description": "Grants permission to delete a RegexPatternSet",
      "access": "Write",
      "resources": [
        {
          "name": "regexpatternset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DeleteRuleGroup.html",
      "name": "DeleteRuleGroup",
      "description": "Grants permission to delete a RuleGroup",
      "access": "Write",
      "resources": [
        {
          "name": "rulegroup",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DeleteWebACL.html",
      "name": "DeleteWebACL",
      "description": "Grants permission to delete a WebACL",
      "access": "Write",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DescribeAllManagedProducts.html",
      "name": "DescribeAllManagedProducts",
      "description": "Grants permission to retrieve product information for a managed rule group",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DescribeManagedProductsByVendor.html",
      "name": "DescribeManagedProductsByVendor",
      "description": "Grants permission to retrieve product information for a managed rule group by a given vendor",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DescribeManagedRuleGroup.html",
      "name": "DescribeManagedRuleGroup",
      "description": "Grants permission to retrieve high-level information for a managed rule group",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DisassociateFirewallManager.html",
      "name": "DisassociateFirewallManager",
      "description": "Grants permission to disassociate Firewall Manager from a WebACL",
      "access": "Write",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_DisassociateWebACL.html",
      "name": "DisassociateWebACL",
      "description": "Grants permission to disassociate a WebACL from an application resource",
      "access": "Write",
      "resources": [
        {
          "name": "agentcore-gateway",
          "is_required": false
        },
        {
          "name": "amplify-app",
          "is_required": false
        },
        {
          "name": "apigateway",
          "is_required": false
        },
        {
          "name": "apprunner",
          "is_required": false
        },
        {
          "name": "appsync",
          "is_required": false
        },
        {
          "name": "loadbalancer/app/",
          "is_required": false
        },
        {
          "name": "userpool",
          "is_required": false
        },
        {
          "name": "verified-access-instance",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GenerateMobileSdkReleaseUrl.html",
      "name": "GenerateMobileSdkReleaseUrl",
      "description": "Grants permission to generate a presigned download URL for the specified release of the mobile SDK",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetDecryptedAPIKey.html",
      "name": "GetDecryptedAPIKey",
      "description": "Grants permission to return your API key in decrypted form. Use this to check the token domains that you have defined for the key",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetIPSet.html",
      "name": "GetIPSet",
      "description": "Grants permission to retrieve details about an IPSet",
      "access": "Read",
      "resources": [
        {
          "name": "ipset",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetLoggingConfiguration.html",
      "name": "GetLoggingConfiguration",
      "description": "Grants permission to retrieve LoggingConfiguration for a WebACL",
      "access": "Read",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}",
        "wafv2:LogScope"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetManagedRuleSet.html",
      "name": "GetManagedRuleSet",
      "description": "Grants permission to retrieve details about a ManagedRuleSet",
      "access": "Read",
      "resources": [
        {
          "name": "managedruleset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetMobileSdkRelease.html",
      "name": "GetMobileSdkRelease",
      "description": "Grants permission to retrieve information for the specified mobile SDK release, including release notes and tags",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetPermissionPolicy.html",
      "name": "GetPermissionPolicy",
      "description": "Grants permission to retrieve a PermissionPolicy for a RuleGroup",
      "access": "Read",
      "resources": [
        {
          "name": "rulegroup",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetRateBasedStatementManagedKeys.html",
      "name": "GetRateBasedStatementManagedKeys",
      "description": "Grants permission to retrieve the keys that are currently blocked by a rate-based rule",
      "access": "Read",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetRegexPatternSet.html",
      "name": "GetRegexPatternSet",
      "description": "Grants permission to retrieve details about a RegexPatternSet",
      "access": "Read",
      "resources": [
        {
          "name": "regexpatternset",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetRevenueStatistics.html",
      "name": "GetRevenueStatistics",
      "description": "Grants permission to retrieve monetization revenue statistics ranked by source or path within a specified time window",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetRevenueStatisticsSummary.html",
      "name": "GetRevenueStatisticsSummary",
      "description": "Grants permission to retrieve a summary of monetization revenue statistics within a specified time window",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetRevenueStatisticsTimeSeries.html",
      "name": "GetRevenueStatisticsTimeSeries",
      "description": "Grants permission to retrieve monetization revenue statistics as a time series within a specified time window",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetRuleGroup.html",
      "name": "GetRuleGroup",
      "description": "Grants permission to retrieve details about a RuleGroup",
      "access": "Read",
      "resources": [
        {
          "name": "rulegroup",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetSampledRequests.html",
      "name": "GetSampledRequests",
      "description": "Grants permission to retrieve detailed information about a sampling of web requests",
      "access": "Read",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetTopPathStatisticsByTraffic.html",
      "name": "GetTopPathStatisticsByTraffic",
      "description": "Grants permission to retrieve aggregated path statistics with bot traffic analysis for a WebACL within a specified time window",
      "access": "Read",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetWebACL.html",
      "name": "GetWebACL",
      "description": "Grants permission to retrieve details about a WebACL",
      "access": "Read",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_GetWebACLForResource.html",
      "name": "GetWebACLForResource",
      "description": "Grants permission to retrieve the WebACL that's associated with a resource",
      "access": "Read",
      "resources": [
        {
          "name": "agentcore-gateway",
          "is_required": false
        },
        {
          "name": "amplify-app",
          "is_required": false
        },
        {
          "name": "apigateway",
          "is_required": false
        },
        {
          "name": "apprunner",
          "is_required": false
        },
        {
          "name": "appsync",
          "is_required": false
        },
        {
          "name": "loadbalancer/app/",
          "is_required": false
        },
        {
          "name": "userpool",
          "is_required": false
        },
        {
          "name": "verified-access-instance",
          "is_required": false
        },
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListAPIKeys.html",
      "name": "ListAPIKeys",
      "description": "Grants permission to retrieve a list of the API keys that you've defined for the specified scope",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListAvailableManagedRuleGroupVersions.html",
      "name": "ListAvailableManagedRuleGroupVersions",
      "description": "Grants permission to retrieve an array of managed rule group versions that are available for you to use",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListAvailableManagedRuleGroups.html",
      "name": "ListAvailableManagedRuleGroups",
      "description": "Grants permission to retrieve an array of managed rule groups that are available for you to use",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListIPSets.html",
      "name": "ListIPSets",
      "description": "Grants permission to retrieve an array of IPSetSummary objects for the IP sets that you manage",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListLoggingConfigurations.html",
      "name": "ListLoggingConfigurations",
      "description": "Grants permission to retrieve an array of your LoggingConfiguration objects",
      "access": "List",
      "resources": [],
      "conditions": [
        "wafv2:LogScope"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListManagedRuleSets.html",
      "name": "ListManagedRuleSets",
      "description": "Grants permission to retrieve an array of your ManagedRuleSet objects",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListMobileSdkReleases.html",
      "name": "ListMobileSdkReleases",
      "description": "Grants permission to retrieve a list of the available releases for the mobile SDK and the specified device platform",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListRegexPatternSets.html",
      "name": "ListRegexPatternSets",
      "description": "Grants permission to retrieve an array of RegexPatternSetSummary objects for the regex pattern sets that you manage",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListResourcesForWebACL.html",
      "name": "ListResourcesForWebACL",
      "description": "Grants permission to retrieve an array of the Amazon Resource Names (ARNs) for the resources that are associated with a web ACL",
      "access": "List",
      "resources": [
        {
          "name": "agentcore-gateway",
          "is_required": false
        },
        {
          "name": "amplify-app",
          "is_required": false
        },
        {
          "name": "apprunner",
          "is_required": false
        },
        {
          "name": "userpool",
          "is_required": false
        },
        {
          "name": "verified-access-instance",
          "is_required": false
        },
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListRuleGroups.html",
      "name": "ListRuleGroups",
      "description": "Grants permission to retrieve an array of RuleGroupSummary objects for the rule groups that you manage",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListSettlementRecords.html",
      "name": "ListSettlementRecords",
      "description": "Grants permission to retrieve a list of monetization settlement records within a specified time window",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list tags for a resource",
      "access": "Read",
      "resources": [
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "regexpatternset",
          "is_required": false
        },
        {
          "name": "rulegroup",
          "is_required": false
        },
        {
          "name": "webacl",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ListWebACLs.html",
      "name": "ListWebACLs",
      "description": "Grants permission to retrieve an array of WebACLSummary objects for the web ACLs that you manage",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_PutFirewallManagerRuleGroups.html",
      "name": "PutFirewallManagerRuleGroups",
      "description": "Grants permission to create FirewallManagedRulesGroups in a WebACL",
      "access": "Write",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_PutLoggingConfiguration.html",
      "name": "PutLoggingConfiguration",
      "description": "Grants permission to enable a LoggingConfiguration, to start logging for a web ACL",
      "access": "Write",
      "resources": [
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": [
        "wafv2:LogDestinationResource",
        "wafv2:LogScope"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_PutManagedRuleSetVersions.html",
      "name": "PutManagedRuleSetVersions",
      "description": "Grants permission to enable create a new or update an existing version of a ManagedRuleSet",
      "access": "Write",
      "resources": [
        {
          "name": "managedruleset",
          "is_required": true
        },
        {
          "name": "rulegroup",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_PutPermissionPolicy.html",
      "name": "PutPermissionPolicy",
      "description": "Grants permission to attach an IAM policy to a resource, used to share rule groups between accounts",
      "access": "Permissions management",
      "resources": [
        {
          "name": "rulegroup",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to associate tags with a AWS resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "regexpatternset",
          "is_required": false
        },
        {
          "name": "rulegroup",
          "is_required": false
        },
        {
          "name": "webacl",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to disassociate tags from an AWS resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "regexpatternset",
          "is_required": false
        },
        {
          "name": "rulegroup",
          "is_required": false
        },
        {
          "name": "webacl",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_UpdateIPSet.html",
      "name": "UpdateIPSet",
      "description": "Grants permission to update an IPSet",
      "access": "Write",
      "resources": [
        {
          "name": "ipset",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_UpdateManagedRuleSetVersionExpiryDate.html",
      "name": "UpdateManagedRuleSetVersionExpiryDate",
      "description": "Grants permission to update the expiry date of a version in ManagedRuleSet",
      "access": "Write",
      "resources": [
        {
          "name": "managedruleset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_UpdateRegexPatternSet.html",
      "name": "UpdateRegexPatternSet",
      "description": "Grants permission to update a RegexPatternSet",
      "access": "Write",
      "resources": [
        {
          "name": "regexpatternset",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_UpdateRuleGroup.html",
      "name": "UpdateRuleGroup",
      "description": "Grants permission to update a RuleGroup",
      "access": "Write",
      "resources": [
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "regexpatternset",
          "is_required": false
        },
        {
          "name": "rulegroup",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_UpdateWebACL.html",
      "name": "UpdateWebACL",
      "description": "Grants permission to update a WebACL",
      "access": "Write",
      "resources": [
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "managedruleset",
          "is_required": false
        },
        {
          "name": "regexpatternset",
          "is_required": false
        },
        {
          "name": "rulegroup",
          "is_required": false
        },
        {
          "name": "webacl",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
      "name": "agentcore-gateway",
      "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
      "name": "amplify-app",
      "arn": "arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
      "name": "apigateway",
      "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${ApiId}/stages/${StageName}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
      "name": "apprunner",
      "arn": "arn:${Partition}:apprunner:${Region}:${Account}:service/${ServiceName}/${ServiceId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
      "name": "appsync",
      "arn": "arn:${Partition}:appsync:${Region}:${Account}:apis/${GraphQLAPIId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_IPSet.html",
      "name": "ipset",
      "arn": "arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/ipset/${Name}/${Id}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
      "name": "loadbalancer/app/",
      "arn": "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/${LoadBalancerName}/${LoadBalancerId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_ManagedRuleSet.html",
      "name": "managedruleset",
      "arn": "arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/managedruleset/${Name}/${Id}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_RegexPatternSet.html",
      "name": "regexpatternset",
      "arn": "arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/regexpatternset/${Name}/${Id}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_RuleGroup.html",
      "name": "rulegroup",
      "arn": "arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/rulegroup/${Name}/${Id}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
      "name": "userpool",
      "arn": "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/${UserPoolId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
      "name": "verified-access-instance",
      "arn": "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/${VerifiedAccessInstanceId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
      "name": "webacl",
      "arn": "arn:${Partition}:wafv2:${Region}:${Account}:${Scope}/webacl/${Name}/${Id}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by the allowed set of values for each of the tags",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by tag-value associated with the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by the presence of mandatory tags in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/developerguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys",
      "name": "wafv2:LogDestinationResource",
      "description": "Filters access by log destination ARN for PutLoggingConfiguration API",
      "type": "ARN"
    },
    {
      "url": "https://docs.aws.amazon.com/waf/latest/developerguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys",
      "name": "wafv2:LogScope",
      "description": "Filters access by log scope for Logging Configuration API",
      "type": "String"
    }
  ]
}