{
  "Name" : "mpa",
  "Actions" : [ {
    "Name" : "CancelSession",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "mpa:ProtectedResourceAccount", "mpa:RequestedOperation" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "session"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "CreateApprovalTeam",
    "ActionConditionKeys" : [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "approval-team"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "CreateIdentitySource",
    "ActionConditionKeys" : [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "identity-source"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteIdentitySource",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "identity-source"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteInactiveApprovalTeamVersion",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "approval-team"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteResourcePolicy",
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetApprovalTeam",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "approval-team"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetIdentitySource",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "identity-source"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetPolicyVersion",
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetResourcePolicy",
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetSession",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "mpa:ProtectedResourceAccount", "mpa:RequestedOperation" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "session"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListApprovalTeams",
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListIdentitySources",
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListPolicies",
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListPolicyVersions",
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListResourcePolicies",
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListSessions",
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListTagsForResource",
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "PutResourcePolicy",
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "StartActiveApprovalTeamDeletion",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "approval-team"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "StartApprovalTeamBaseline",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "approval-team"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "StartSession",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "mpa:ProtectedResourceAccount", "mpa:RequestedOperation" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "session"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "TagResource",
    "ActionConditionKeys" : [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : true,
        "IsWrite" : true
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "UntagResource",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "aws:TagKeys" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : true,
        "IsWrite" : true
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "UpdateApprovalTeam",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "approval-team"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  } ],
  "ConditionKeys" : [ {
    "Name" : "aws:RequestTag/${TagKey}",
    "Types" : [ "String" ]
  }, {
    "Name" : "aws:ResourceTag/${TagKey}",
    "Types" : [ "String" ]
  }, {
    "Name" : "aws:TagKeys",
    "Types" : [ "ArrayOfString" ]
  }, {
    "Name" : "mpa:ProtectedResourceAccount",
    "Types" : [ "String" ]
  }, {
    "Name" : "mpa:RequestedOperation",
    "Types" : [ "String" ]
  } ],
  "Operations" : [ {
    "Name" : "CancelSession",
    "AuthorizedActions" : [ {
      "Name" : "CancelSession",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "cancel_session",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "CreateApprovalTeam",
    "AuthorizedActions" : [ {
      "Name" : "CreateApprovalTeam",
      "Service" : "mpa"
    }, {
      "Name" : "TagResource",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "create_approval_team",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "CreateIdentitySource",
    "AuthorizedActions" : [ {
      "Name" : "CreateIdentitySource",
      "Service" : "mpa"
    }, {
      "Name" : "TagResource",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "create_identity_source",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DeleteIdentitySource",
    "AuthorizedActions" : [ {
      "Name" : "DeleteIdentitySource",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "delete_identity_source",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DeleteInactiveApprovalTeamVersion",
    "AuthorizedActions" : [ {
      "Name" : "DeleteInactiveApprovalTeamVersion",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "delete_inactive_approval_team_version",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "GetApprovalTeam",
    "AuthorizedActions" : [ {
      "Name" : "GetApprovalTeam",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "get_approval_team",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "GetIdentitySource",
    "AuthorizedActions" : [ {
      "Name" : "GetIdentitySource",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "get_identity_source",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "GetPolicyVersion",
    "AuthorizedActions" : [ {
      "Name" : "GetPolicyVersion",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "get_policy_version",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "GetResourcePolicy",
    "AuthorizedActions" : [ {
      "Name" : "GetResourcePolicy",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "get_resource_policy",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "GetSession",
    "AuthorizedActions" : [ {
      "Name" : "GetSession",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "get_session",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListApprovalTeams",
    "AuthorizedActions" : [ {
      "Name" : "ListApprovalTeams",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "list_approval_teams",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListIdentitySources",
    "AuthorizedActions" : [ {
      "Name" : "ListIdentitySources",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "list_identity_sources",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListPolicies",
    "AuthorizedActions" : [ {
      "Name" : "ListPolicies",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "list_policies",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListPolicyVersions",
    "AuthorizedActions" : [ {
      "Name" : "ListPolicyVersions",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "list_policy_versions",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListResourcePolicies",
    "AuthorizedActions" : [ {
      "Name" : "ListResourcePolicies",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "list_resource_policies",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListSessions",
    "AuthorizedActions" : [ {
      "Name" : "ListSessions",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "list_sessions",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListTagsForResource",
    "AuthorizedActions" : [ {
      "Name" : "ListTagsForResource",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "list_tags_for_resource",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "StartActiveApprovalTeamDeletion",
    "AuthorizedActions" : [ {
      "Name" : "StartActiveApprovalTeamDeletion",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "start_active_approval_team_deletion",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "StartApprovalTeamBaseline",
    "AuthorizedActions" : [ {
      "Name" : "StartApprovalTeamBaseline",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "start_approval_team_baseline",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "TagResource",
    "AuthorizedActions" : [ {
      "Name" : "TagResource",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "tag_resource",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "UntagResource",
    "AuthorizedActions" : [ {
      "Name" : "UntagResource",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "untag_resource",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "UpdateApprovalTeam",
    "AuthorizedActions" : [ {
      "Name" : "UpdateApprovalTeam",
      "Service" : "mpa"
    } ],
    "SDK" : [ {
      "Name" : "mpa",
      "Method" : "update_approval_team",
      "Package" : "Boto3"
    } ]
  } ],
  "Resources" : [ {
    "Name" : "approval-team",
    "ARNFormats" : [ "arn:${Partition}:mpa:${Region}:${Account}:approval-team/${ApprovalTeamId}" ],
    "ConditionKeys" : [ "aws:ResourceTag/${TagKey}" ]
  }, {
    "Name" : "identity-source",
    "ARNFormats" : [ "arn:${Partition}:mpa:${Region}:${Account}:identity-source/${IdentitySourceId}" ],
    "ConditionKeys" : [ "aws:ResourceTag/${TagKey}" ]
  }, {
    "Name" : "session",
    "ARNFormats" : [ "arn:${Partition}:mpa:${Region}:${Account}:session/${SessionId}" ],
    "ConditionKeys" : [ "aws:ResourceTag/${TagKey}" ]
  } ],
  "Version" : "v1.4"
}