{
  "Name" : "ds-data",
  "Actions" : [ {
    "Name" : "AddGroupMember",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:MemberName", "ds-data:MemberRealm", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "CreateGroup",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "CreateUser",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteGroup",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteUser",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DescribeGroup",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DescribeUser",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DisableUser",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListGroupMembers",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:MemberRealm", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListGroups",
    "ActionConditionKeys" : [ "ds-data:Realm" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListGroupsForMember",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:MemberRealm", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListUsers",
    "ActionConditionKeys" : [ "ds-data:Realm" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "RemoveGroupMember",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:MemberName", "ds-data:MemberRealm", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "SearchGroups",
    "ActionConditionKeys" : [ "ds-data:Realm" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "SearchUsers",
    "ActionConditionKeys" : [ "ds-data:Realm" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "UpdateGroup",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "UpdateUser",
    "ActionConditionKeys" : [ "ds-data:Identifier", "ds-data:Realm", "ds-data:SAMAccountName" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "directory"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  } ],
  "ConditionKeys" : [ {
    "Name" : "aws:ResourceTag/${TagKey}",
    "Types" : [ "String" ]
  }, {
    "Name" : "ds-data:Identifier",
    "Types" : [ "String" ]
  }, {
    "Name" : "ds-data:MemberName",
    "Types" : [ "String" ]
  }, {
    "Name" : "ds-data:MemberRealm",
    "Types" : [ "String" ]
  }, {
    "Name" : "ds-data:Realm",
    "Types" : [ "String" ]
  }, {
    "Name" : "ds-data:SAMAccountName",
    "Types" : [ "String" ]
  } ],
  "Operations" : [ {
    "Name" : "AddGroupMember",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "AddGroupMember",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "add_group_member",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "CreateGroup",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "CreateGroup",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "create_group",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "CreateUser",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "CreateUser",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "create_user",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DeleteGroup",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "DeleteGroup",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "delete_group",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DeleteUser",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "DeleteUser",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "delete_user",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DescribeGroup",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "DescribeGroup",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "describe_group",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DescribeUser",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "DescribeUser",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "describe_user",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DisableUser",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "DisableUser",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "disable_user",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListGroupMembers",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "ListGroupMembers",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "list_group_members",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListGroups",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "ListGroups",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "list_groups",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListGroupsForMember",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "ListGroupsForMember",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "list_groups_for_member",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListUsers",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "ListUsers",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "list_users",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "RemoveGroupMember",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "RemoveGroupMember",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "remove_group_member",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "SearchGroups",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "DescribeGroup",
      "Service" : "ds-data"
    }, {
      "Name" : "SearchGroups",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "search_groups",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "SearchUsers",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "DescribeUser",
      "Service" : "ds-data"
    }, {
      "Name" : "SearchUsers",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "search_users",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "UpdateGroup",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "UpdateGroup",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "update_group",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "UpdateUser",
    "AuthorizedActions" : [ {
      "Name" : "AccessDSData",
      "Service" : "ds"
    }, {
      "Name" : "UpdateUser",
      "Service" : "ds-data"
    } ],
    "SDK" : [ {
      "Name" : "ds-data",
      "Method" : "update_user",
      "Package" : "Boto3"
    } ]
  } ],
  "Resources" : [ {
    "Name" : "directory",
    "ARNFormats" : [ "arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}" ],
    "ConditionKeys" : [ "aws:ResourceTag/${TagKey}" ]
  } ],
  "Version" : "v1.4"
}