{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_xray.html",
  "name": "AWS X-Ray",
  "prefix": "xray",
  "timestamp": "1788739206",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/xray/latest/devguide/security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-console",
      "name": "BatchGetTraceSummaryById",
      "description": "Grants permission to retrieve metadata for a list of traces specified by ID",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_BatchGetTraces.html",
      "name": "BatchGetTraces",
      "description": "Grants permission to retrieve a list of traces specified by ID. Each trace is a collection of segment documents that originates from a single request. Use GetTraceSummaries to get a list of trace IDs",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/API_CancelTraceRetrieval.html",
      "name": "CancelTraceRetrieval",
      "description": "Grants permission to cancel an ongoing trace retrieval job initiated by StartTraceRetrieval using the provided RetrievalToken. A successful cancellation will return an HTTP 200 response",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_CreateGroup.html",
      "name": "CreateGroup",
      "description": "Grants permission to create a group resource with a name and a filter expression",
      "access": "Write",
      "resources": [
        {
          "name": "group",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_CreateSamplingRule.html",
      "name": "CreateSamplingRule",
      "description": "Grants permission to create a rule to control sampling behavior for instrumented applications",
      "access": "Write",
      "resources": [
        {
          "name": "sampling-rule",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_DeleteGroup.html",
      "name": "DeleteGroup",
      "description": "Grants permission to delete a group resource",
      "access": "Write",
      "resources": [
        {
          "name": "group",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_DeleteResourcePolicy.html",
      "name": "DeleteResourcePolicy",
      "description": "Grants permission to delete resource policies",
      "access": "Write",
      "resources": [],
      "conditions": [
        "xray:ResourcePolicyName"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_DeleteSamplingRule.html",
      "name": "DeleteSamplingRule",
      "description": "Grants permission to delete a sampling rule",
      "access": "Write",
      "resources": [
        {
          "name": "sampling-rule",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/devguide/security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-console",
      "name": "GetDistinctTraceGraphs",
      "description": "Grants permission to retrieve distinct service graphs for one or more specific trace IDs",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetEncryptionConfig.html",
      "name": "GetEncryptionConfig",
      "description": "Grants permission to retrieve the current encryption configuration for X-Ray data",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetGroup.html",
      "name": "GetGroup",
      "description": "Grants permission to retrieve group resource details",
      "access": "Read",
      "resources": [
        {
          "name": "group",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetGroups.html",
      "name": "GetGroups",
      "description": "Grants permission to retrieve all active group details",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetIndexingRules.html",
      "name": "GetIndexingRules",
      "description": "Grants permission to retrieve all indexing rules. Indexing rules are used to determine the server-side sampling rate for spans ingested through the CloudWatchLogs destination and indexed by X-Ray",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetInsight.html",
      "name": "GetInsight",
      "description": "Grants permission to retrieve the details of a specific insight",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetInsightEvents.html",
      "name": "GetInsightEvents",
      "description": "Grants permission to retrieve the events of a specific insight",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetInsightImpactGraph.html",
      "name": "GetInsightImpactGraph",
      "description": "Grants permission to retrieve the part of the service graph which is impacted for a specific insight",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetInsightSummaries.html",
      "name": "GetInsightSummaries",
      "description": "Grants permission to retrieve the summary of all insights for a group and time range with optional filters",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/API_GetRetrievedTracesGraph.html",
      "name": "GetRetrievedTracesGraph",
      "description": "Grants permission to retrieve a service graph for traces based on the specified RetrievalToken from the Transaction Search CloudWatch log group",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetSamplingRules.html",
      "name": "GetSamplingRules",
      "description": "Grants permission to retrieve all sampling rules",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetSamplingStatisticSummaries.html",
      "name": "GetSamplingStatisticSummaries",
      "description": "Grants permission to retrieve information about recent sampling results for all sampling rules",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetSamplingTargets.html",
      "name": "GetSamplingTargets",
      "description": "Grants permission to request a sampling quota for rules that the service is using to sample requests",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetServiceGraph.html",
      "name": "GetServiceGraph",
      "description": "Grants permission to retrieve a document that describes services that process incoming requests, and downstream services that they call as a result",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetTimeSeriesServiceStatistics.html",
      "name": "GetTimeSeriesServiceStatistics",
      "description": "Grants permission to retrieve an aggregation of service statistics defined by a specific time range bucketed into time intervals",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetTraceGraph.html",
      "name": "GetTraceGraph",
      "description": "Grants permission to retrieve a service graph for one or more specific trace IDs",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetTraceSegmentDestination.html",
      "name": "GetTraceSegmentDestination",
      "description": "Grants permission to retrieve the current destination of data sent to PutTraceSegments and OpenTelemetry API",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_GetTraceSummaries.html",
      "name": "GetTraceSummaries",
      "description": "Grants permission to retrieve IDs and metadata for traces available for a specified time frame using an optional filter. To get the full traces, pass the trace IDs to BatchGetTraces",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account-Setup.html#CloudWatch-Unified-Cross-Account-Setup-permissions",
      "name": "Link",
      "description": "Grants permission to share X-Ray resources with a monitoring account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_ListResourcePolicies.html",
      "name": "ListResourcePolicies",
      "description": "Grants permission to list resource policies",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/API_ListRetrievedTraces.html",
      "name": "ListRetrievedTraces",
      "description": "Grants permission to retrieve a list of traces for a given RetrievalToken from the Transaction Search CloudWatch log group",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list tags for an X-Ray resource",
      "access": "List",
      "resources": [
        {
          "name": "group",
          "is_required": false
        },
        {
          "name": "sampling-rule",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_PutEncryptionConfig.html",
      "name": "PutEncryptionConfig",
      "description": "Grants permission to update the encryption configuration for X-Ray data",
      "access": "Permissions management",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_PutResourcePolicy.html",
      "name": "PutResourcePolicy",
      "description": "Grants permission to create or update resource policies",
      "access": "Write",
      "resources": [],
      "conditions": [
        "xray:ResourcePolicyName"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-OTLPEndpoint.html",
      "name": "PutSpans",
      "description": "Grants permission to upload OpenTelemetry spans to AWS X-Ray",
      "access": "Write",
      "resources": [],
      "conditions": [
        "logs:LogGeneratingResourceArns"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/devguide/security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-console",
      "name": "PutSpansForIndexing",
      "description": "Grants permission to upload spans to AWS X-Ray to be indexed",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_PutTelemetryRecords.html",
      "name": "PutTelemetryRecords",
      "description": "Grants permission to send AWS X-Ray daemon telemetry to the service",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_PutTraceSegments.html",
      "name": "PutTraceSegments",
      "description": "Grants permission to upload segment documents to AWS X-Ray. The X-Ray SDK generates segment documents and sends them to the X-Ray daemon, which uploads them in batches",
      "access": "Write",
      "resources": [],
      "conditions": [
        "logs:LogGeneratingResourceArns"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/API_StartTraceRetrieval",
      "name": "StartTraceRetrieval",
      "description": "Grants permission to initiate a trace retrieval process using the specified time range and for the given trace IDs on the Transaction Search CloudWatch log group",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to add tags to an X-Ray resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "group",
          "is_required": false
        },
        {
          "name": "sampling-rule",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to remove tags from an X-Ray resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "group",
          "is_required": false
        },
        {
          "name": "sampling-rule",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_UpdateGroup.html",
      "name": "UpdateGroup",
      "description": "Grants permission to update a group resource",
      "access": "Write",
      "resources": [
        {
          "name": "group",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_UpdateIndexingRule.html",
      "name": "UpdateIndexingRule",
      "description": "Grants permission to modify an indexing rule's configuration",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_UpdateSamplingRule.html",
      "name": "UpdateSamplingRule",
      "description": "Grants permission to modify a sampling rule's configuration",
      "access": "Write",
      "resources": [
        {
          "name": "sampling-rule",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/api/API_UpdateTraceSegmentDestination.html",
      "name": "UpdateTraceSegmentDestination",
      "description": "Grants permission to modify the destination of data sent to PutTraceSegments and OpenTelemetry API",
      "access": "Write",
      "resources": [],
      "conditions": [
        "xray:TraceSegmentDestination"
      ]
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/xray/latest/devguide/xray-concepts.html#xray-concepts-groups",
      "name": "group",
      "arn": "arn:${Partition}:xray:${Region}:${Account}:group/${GroupName}/${Id}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/xray/latest/devguide/xray-concepts.html#xray-concepts-sampling",
      "name": "sampling-rule",
      "arn": "arn:${Partition}:xray:${Region}:${Account}:sampling-rule/${SamplingRuleName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by the tags that are passed in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by the tags associated with the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by the tag keys that are passed in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsx-ray.html#awsx-ray-actions-as-permissions",
      "name": "logs:LogGeneratingResourceArns",
      "description": "Filters access by LogGeneratingResourceArn in the request",
      "type": "ArrayOfARN"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsx-ray.html#awsx-ray-actions-as-permissions",
      "name": "xray:ResourcePolicyName",
      "description": "Filters access by PolicyName in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsx-ray.html#awsx-ray-actions-as-permissions",
      "name": "xray:TraceSegmentDestination",
      "description": "Filters access by TraceSegmentDestination type in the request",
      "type": "String"
    }
  ]
}