cloudformation-validate-data-source 1.12.0

{
  "iam_action_resource_patterns": {
    "a4b:associatecontactwithaddressbook": [
      "arn:${Partition}:a4b:${Region}:${Account}:address-book/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:contact/.*"
    ],
    "a4b:associatedevicewithnetworkprofile": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:network-profile/.*"
    ],
    "a4b:associatedevicewithroom": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:associateskillgroupwithroom": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:skill-group/.*"
    ],
    "a4b:associateskillwithskillgroup": [
      "arn:${Partition}:a4b:${Region}:${Account}:skill-group/.*"
    ],
    "a4b:createroom": [
      "arn:${Partition}:a4b:${Region}:${Account}:profile/.*"
    ],
    "a4b:createuser": [
      "arn:${Partition}:a4b:${Region}:${Account}:user/.*"
    ],
    "a4b:deleteaddressbook": [
      "arn:${Partition}:a4b:${Region}:${Account}:address-book/.*"
    ],
    "a4b:deletebusinessreportschedule": [
      "arn:${Partition}:a4b:${Region}:${Account}:schedule/.*"
    ],
    "a4b:deleteconferenceprovider": [
      "arn:${Partition}:a4b:${Region}:${Account}:conference-provider/.*"
    ],
    "a4b:deletecontact": [
      "arn:${Partition}:a4b:${Region}:${Account}:contact/.*"
    ],
    "a4b:deletedevice": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*"
    ],
    "a4b:deletedeviceusagedata": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*"
    ],
    "a4b:deletegatewaygroup": [
      "arn:${Partition}:a4b:${Region}:${Account}:gateway-group/.*"
    ],
    "a4b:deletenetworkprofile": [
      "arn:${Partition}:a4b:${Region}:${Account}:network-profile/.*"
    ],
    "a4b:deleteprofile": [
      "arn:${Partition}:a4b:${Region}:${Account}:profile/.*"
    ],
    "a4b:deleteroom": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:deleteroomskillparameter": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:deleteskillauthorization": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:deleteskillgroup": [
      "arn:${Partition}:a4b:${Region}:${Account}:skill-group/.*"
    ],
    "a4b:deleteuser": [
      "arn:${Partition}:a4b:${Region}:${Account}:user/.*"
    ],
    "a4b:disassociatecontactfromaddressbook": [
      "arn:${Partition}:a4b:${Region}:${Account}:address-book/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:contact/.*"
    ],
    "a4b:disassociatedevicefromroom": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*"
    ],
    "a4b:disassociateskillfromskillgroup": [
      "arn:${Partition}:a4b:${Region}:${Account}:skill-group/.*"
    ],
    "a4b:disassociateskillfromusers": [
      "arn:${Partition}:a4b:${Region}:${Account}:user/.*"
    ],
    "a4b:disassociateskillgroupfromroom": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:skill-group/.*"
    ],
    "a4b:forgetsmarthomeappliances": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:getaddressbook": [
      "arn:${Partition}:a4b:${Region}:${Account}:address-book/.*"
    ],
    "a4b:getconferenceprovider": [
      "arn:${Partition}:a4b:${Region}:${Account}:conference-provider/.*"
    ],
    "a4b:getcontact": [
      "arn:${Partition}:a4b:${Region}:${Account}:contact/.*"
    ],
    "a4b:getdevice": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*"
    ],
    "a4b:getgateway": [
      "arn:${Partition}:a4b:${Region}:${Account}:gateway/.*"
    ],
    "a4b:getgatewaygroup": [
      "arn:${Partition}:a4b:${Region}:${Account}:gateway-group/.*"
    ],
    "a4b:getnetworkprofile": [
      "arn:${Partition}:a4b:${Region}:${Account}:network-profile/.*"
    ],
    "a4b:getprofile": [
      "arn:${Partition}:a4b:${Region}:${Account}:profile/.*"
    ],
    "a4b:getroom": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:getroomskillparameter": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:getskillgroup": [
      "arn:${Partition}:a4b:${Region}:${Account}:skill-group/.*"
    ],
    "a4b:listdeviceevents": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*"
    ],
    "a4b:listgateways": [
      "arn:${Partition}:a4b:${Region}:${Account}:gateway-group/.*"
    ],
    "a4b:listsmarthomeappliances": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:listtags": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:user/.*"
    ],
    "a4b:putroomskillparameter": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:putskillauthorization": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:revokeinvitation": [
      "arn:${Partition}:a4b:${Region}:${Account}:user/.*"
    ],
    "a4b:sendinvitation": [
      "arn:${Partition}:a4b:${Region}:${Account}:user/.*"
    ],
    "a4b:startsmarthomeappliancediscovery": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:tagresource": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:user/.*"
    ],
    "a4b:untagresource": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*",
      "arn:${Partition}:a4b:${Region}:${Account}:user/.*"
    ],
    "a4b:updateaddressbook": [
      "arn:${Partition}:a4b:${Region}:${Account}:address-book/.*"
    ],
    "a4b:updatebusinessreportschedule": [
      "arn:${Partition}:a4b:${Region}:${Account}:schedule/.*"
    ],
    "a4b:updateconferenceprovider": [
      "arn:${Partition}:a4b:${Region}:${Account}:conference-provider/.*"
    ],
    "a4b:updatecontact": [
      "arn:${Partition}:a4b:${Region}:${Account}:contact/.*"
    ],
    "a4b:updatedevice": [
      "arn:${Partition}:a4b:${Region}:${Account}:device/.*"
    ],
    "a4b:updategateway": [
      "arn:${Partition}:a4b:${Region}:${Account}:gateway/.*"
    ],
    "a4b:updategatewaygroup": [
      "arn:${Partition}:a4b:${Region}:${Account}:gateway-group/.*"
    ],
    "a4b:updatenetworkprofile": [
      "arn:${Partition}:a4b:${Region}:${Account}:network-profile/.*"
    ],
    "a4b:updateprofile": [
      "arn:${Partition}:a4b:${Region}:${Account}:profile/.*"
    ],
    "a4b:updateroom": [
      "arn:${Partition}:a4b:${Region}:${Account}:room/.*"
    ],
    "a4b:updateskillgroup": [
      "arn:${Partition}:a4b:${Region}:${Account}:skill-group/.*"
    ],
    "access-analyzer:applyarchiverule": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:createaccesspreview": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:createanalyzer": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:createarchiverule": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:createservicelinkedanalyzer": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:deleteanalyzer": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:deletearchiverule": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:deleteservicelinkedanalyzer": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:generatefindingrecommendation": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:getaccesspreview": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:getanalyzedresource": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:getanalyzer": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:getarchiverule": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:getfinding": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:getfindingrecommendation": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:getfindingsstatistics": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:listaccesspreviewfindings": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:listaccesspreviews": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:listanalyzedresources": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:listarchiverules": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:listfindings": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:listtagsforresource": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:startresourcescan": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:tagresource": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:untagresource": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:updateanalyzer": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:updatearchiverule": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "access-analyzer:updatefindings": [
      "arn:${Partition}:access-analyzer:${Region}:${Account}:analyzer/.*"
    ],
    "account-access:createentitlement": [
      "arn:${Partition}:account-access:${Region}:${Account}:application/.*"
    ],
    "account-access:deleteapplication": [
      "arn:${Partition}:account-access:${Region}:${Account}:application/.*"
    ],
    "account-access:deleteentitlement": [
      "arn:${Partition}:account-access:${Region}:${Account}:application/.*"
    ],
    "account-access:getapplication": [
      "arn:${Partition}:account-access:${Region}:${Account}:application/.*"
    ],
    "account-access:getentitlement": [
      "arn:${Partition}:account-access:${Region}:${Account}:application/.*"
    ],
    "account-access:listentitlements": [
      "arn:${Partition}:account-access:${Region}:${Account}:application/.*"
    ],
    "account-access:listtagsforresource": [
      "arn:${Partition}:account-access:${Region}:${Account}:application/.*"
    ],
    "account-access:tagresource": [
      "arn:${Partition}:account-access:${Region}:${Account}:application/.*"
    ],
    "account-access:untagresource": [
      "arn:${Partition}:account-access:${Region}:${Account}:application/.*"
    ],
    "account:acceptprimaryemailupdate": [
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:closeaccount": [
      "arn:${Partition}:account::${Account}:account"
    ],
    "account:deletealternatecontact": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:disableregion": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:enableregion": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:getaccountinformation": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:getalternatecontact": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:getcontactinformation": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:getgovcloudaccountinformation": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:getprimaryemail": [
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:getprimaryemailupdatestatus": [
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:getregionoptstatus": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:listregions": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:putaccountname": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:putalternatecontact": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:putcontactinformation": [
      "arn:${Partition}:account::${Account}:account",
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "account:startprimaryemailupdate": [
      "arn:${Partition}:account::${ManagementAccountId}:account/.*"
    ],
    "acm-pca:createcertificateauthorityauditreport": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:createpermission": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:deletecertificateauthority": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:deletepermission": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:deletepolicy": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:describecertificateauthority": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:describecertificateauthorityauditreport": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:getcertificate": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:getcertificateauthoritycertificate": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:getcertificateauthoritycsr": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:getpolicy": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:importcertificateauthoritycertificate": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:issuecertificate": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:listpermissions": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:listtags": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:putpolicy": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:restorecertificateauthority": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:revokecertificate": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:tagcertificateauthority": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:untagcertificateauthority": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm-pca:updatecertificateauthority": [
      "arn:${Partition}:acm-pca:${Region}:${Account}:certificate-authority/.*"
    ],
    "acm:addtagstocertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:createacmedomainvalidation": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:createacmeexternalaccountbinding": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:deleteacmedomainvalidation": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:deleteacmeendpoint": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:deleteacmeexternalaccountbinding": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:deletecertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:describeacmeaccount": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:describeacmedomainvalidation": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:describeacmeendpoint": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:describeacmeexternalaccountbinding": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:describecertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:exportcertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:getacmeexternalaccountbindingcredentials": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:getcertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:importcertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:listacmeaccounts": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:listacmedomainvalidations": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:listacmeexternalaccountbindings": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:listcertificatedomainvalidations": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:listtagsforcertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:listtagsforresource": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:removetagsfromcertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:renewcertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:resendvalidationemail": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:revokeacmeaccount": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:revokeacmeexternalaccountbinding": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:revokecertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:tagresource": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:untagresource": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:updateacmedomainvalidation": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:updateacmeendpoint": [
      "arn:${Partition}:acm:${Region}:${Account}:acme-endpoint/.*"
    ],
    "acm:updatecertificate": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "acm:updatecertificateoptions": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "aco-automation:deleteautomationrule": [
      "arn:${Partition}:compute-optimizer::${Account}:automation-rule/.*"
    ],
    "aco-automation:getautomationrule": [
      "arn:${Partition}:compute-optimizer::${Account}:automation-rule/.*"
    ],
    "aco-automation:listtagsforresource": [
      "arn:${Partition}:compute-optimizer::${Account}:automation-rule/.*"
    ],
    "aco-automation:tagresource": [
      "arn:${Partition}:compute-optimizer::${Account}:automation-rule/.*"
    ],
    "aco-automation:untagresource": [
      "arn:${Partition}:compute-optimizer::${Account}:automation-rule/.*"
    ],
    "aco-automation:updateautomationrule": [
      "arn:${Partition}:compute-optimizer::${Account}:automation-rule/.*"
    ],
    "agent-registry:createregistryrecord": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:deleteregistry": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:deleteregistryrecord": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:deleteresourcepolicy": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:getdiscoverableregistryrecord": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:getregistry": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:getregistryrecord": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:getresourcepolicy": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:invokeregistrymcp": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:listdiscoverableregistryrecords": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:listregistryrecords": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:listtagsforresource": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:putresourcepolicy": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:searchdiscoverableregistryrecords": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:submitregistryrecordforapproval": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:tagresource": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:untagresource": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:updateregistry": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:updateregistryrecord": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "agent-registry:updateregistryrecordstatus": [
      "arn:${Partition}:agent-registry:${Region}:${Account}:registry/.*"
    ],
    "aidevops:associateservice": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:createaccesstoken": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:createagentspace": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:createasset": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:createassetfile": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:createbacklogtask": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:createchat": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:createknowledgeitem": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:createonetimeloginsession": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:createprivateconnection": [
      "arn:${Partition}:aidevops:${Region}:${Account}:private-connection/.*"
    ],
    "aidevops:createtrigger": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:deleteagentspace": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:deleteasset": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:deleteassetfile": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:deleteknowledgeitem": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:deleteprivateconnection": [
      "arn:${Partition}:aidevops:${Region}:${Account}:private-connection/.*"
    ],
    "aidevops:deletetrigger": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:deregisterservice": [
      "arn:${Partition}:aidevops:${Region}:${Account}:service/.*"
    ],
    "aidevops:describeprivateconnection": [
      "arn:${Partition}:aidevops:${Region}:${Account}:private-connection/.*"
    ],
    "aidevops:describeservices": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:describesupportlevel": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:disableoperatorapp": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:disassociateservice": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:discovertopology": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:enableoperatorapp": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:endchatforcase": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getaccesstoken": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getagentspace": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getasset": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getassetcontent": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getassetfile": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getassociation": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getbacklogtask": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getknowledgeitem": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getoperatorapp": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getrecommendation": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:getservice": [
      "arn:${Partition}:aidevops:${Region}:${Account}:service/.*"
    ],
    "aidevops:gettrigger": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:initiatechatforcase": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listaccesstokens": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listassetfiles": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listassets": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listassetversions": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listassociations": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listbacklogtasks": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listchats": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listexecutions": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listgoals": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listjournalrecords": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listknowledgeitems": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listknowledgeitemversions": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listpendingmessages": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listrecommendations": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listtagsforresource": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*",
      "arn:${Partition}:aidevops:${Region}:${Account}:private-connection/.*",
      "arn:${Partition}:aidevops:${Region}:${Account}:service/.*"
    ],
    "aidevops:listtriggers": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:listwebhooks": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:registerservice": [
      "arn:${Partition}:aidevops:${Region}:${Account}:service/.*"
    ],
    "aidevops:revokeaccesstoken": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:rotateaccesstoken": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:sendmessage": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:tagresource": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*",
      "arn:${Partition}:aidevops:${Region}:${Account}:private-connection/.*",
      "arn:${Partition}:aidevops:${Region}:${Account}:service/.*"
    ],
    "aidevops:untagresource": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*",
      "arn:${Partition}:aidevops:${Region}:${Account}:private-connection/.*",
      "arn:${Partition}:aidevops:${Region}:${Account}:service/.*"
    ],
    "aidevops:updateagentspace": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updateapprovalaction": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updateasset": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updateassetfile": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updateassociation": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updatebacklogtask": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updategoal": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updateknowledgeitem": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updateoperatorappidpconfig": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updateprivateconnectioncertificate": [
      "arn:${Partition}:aidevops:${Region}:${Account}:private-connection/.*"
    ],
    "aidevops:updaterecommendation": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:updatetrigger": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aidevops:validateawsassociations": [
      "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/.*"
    ],
    "aiops:createinvestigation": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:createinvestigationevent": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:createinvestigationresource": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:createreport": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:deleteinvestigation": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:deleteinvestigationgroup": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:deleteinvestigationgrouppolicy": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:generatereport": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:getfact": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:getfactversions": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:getinvestigation": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:getinvestigationevent": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:getinvestigationgroup": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:getinvestigationgrouppolicy": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:getinvestigationresource": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:getreport": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:listfacts": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:listinvestigationevents": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:listinvestigations": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:listreports": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:listtagsforresource": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:putfact": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:putinvestigationgrouppolicy": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:tagresource": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:untagresource": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:updateinvestigation": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:updateinvestigationevent": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:updateinvestigationgroup": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:updatereport": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "aiops:validateinvestigationgroup": [
      "arn:${Partition}:aiops:${Region}:${Account}:investigation-group/.*"
    ],
    "airflow-serverless:deleteworkflow": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:gettaskinstance": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:getworkflow": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:getworkflowrun": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:listtagsforresource": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:listtaskinstances": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:listworkflowruns": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:listworkflowversions": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:startworkflowrun": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:stopworkflowrun": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:tagresource": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:untagresource": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow-serverless:updateworkflow": [
      "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/.*"
    ],
    "airflow:createclitoken": [
      "arn:${Partition}:airflow:${Region}:${Account}:environment/.*"
    ],
    "airflow:createenvironment": [
      "arn:${Partition}:airflow:${Region}:${Account}:environment/.*"
    ],
    "airflow:createweblogintoken": [
      "arn:${Partition}:airflow:${Region}:${Account}:role/.*"
    ],
    "airflow:deleteenvironment": [
      "arn:${Partition}:airflow:${Region}:${Account}:environment/.*"
    ],
    "airflow:getenvironment": [
      "arn:${Partition}:airflow:${Region}:${Account}:environment/.*"
    ],
    "airflow:invokerestapi": [
      "arn:${Partition}:airflow:${Region}:${Account}:role/.*"
    ],
    "airflow:listtagsforresource": [
      "arn:${Partition}:airflow:${Region}:${Account}:environment/.*"
    ],
    "airflow:publishmetrics": [
      "arn:${Partition}:airflow:${Region}:${Account}:environment/.*"
    ],
    "airflow:tagresource": [
      "arn:${Partition}:airflow:${Region}:${Account}:environment/.*"
    ],
    "airflow:untagresource": [
      "arn:${Partition}:airflow:${Region}:${Account}:environment/.*"
    ],
    "airflow:updateenvironment": [
      "arn:${Partition}:airflow:${Region}:${Account}:environment/.*"
    ],
    "amplify:associatewebacl": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:createbackendenvironment": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:createbranch": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:createdeployment": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:createdomainassociation": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:createwebhook": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:deleteapp": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:deletebackendenvironment": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:deletebranch": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:deletedomainassociation": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:deletejob": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:deletewebhook": [
      "arn:${Partition}:amplify:${Region}:${Account}:webhooks/.*"
    ],
    "amplify:disassociatewebacl": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:generateaccesslogs": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:getapp": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:getartifacturl": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:getbackendenvironment": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:getbranch": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:getdomainassociation": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:getjob": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:getwebaclforresource": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:getwebhook": [
      "arn:${Partition}:amplify:${Region}:${Account}:webhooks/.*"
    ],
    "amplify:listartifacts": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:listbackendenvironments": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:listbranches": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:listdomainassociations": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:listjobs": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:listtagsforresource": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*",
      "arn:${Partition}:amplify:${Region}:${Account}:webhooks/.*"
    ],
    "amplify:listwebhooks": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:startdeployment": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:startjob": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:stopjob": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:tagresource": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*",
      "arn:${Partition}:amplify:${Region}:${Account}:webhooks/.*"
    ],
    "amplify:untagresource": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*",
      "arn:${Partition}:amplify:${Region}:${Account}:webhooks/.*"
    ],
    "amplify:updateapp": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:updatebranch": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:updatedomainassociation": [
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*"
    ],
    "amplify:updatewebhook": [
      "arn:${Partition}:amplify:${Region}:${Account}:webhooks/.*"
    ],
    "amplifybackend:clonebackend": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:createbackend": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/*"
    ],
    "amplifybackend:createbackendapi": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:createbackendauth": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:createbackendconfig": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:createbackendstorage": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:createtoken": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:deletebackend": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:deletebackendapi": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:deletebackendauth": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:deletebackendstorage": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:deletetoken": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:generatebackendapimodels": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:getbackend": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:getbackendapi": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:getbackendapimodels": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:getbackendauth": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:getbackendjob": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:getbackendstorage": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:gettoken": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:importbackendauth": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:importbackendstorage": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:listbackendjobs": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:removeallbackends": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:removebackendconfig": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:updatebackendapi": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:updatebackendauth": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:updatebackendconfig": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:updatebackendjob": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifybackend:updatebackendstorage": [
      "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/.*"
    ],
    "amplifyuibuilder:deletecomponent": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:deleteform": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:deletetheme": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:getcodegenjob": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:getcomponent": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:getform": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:gettheme": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:listtagsforresource": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:tagresource": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:untagresource": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:updatecomponent": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:updateform": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "amplifyuibuilder:updatetheme": [
      "arn:${Partition}:amplifyuibuilder:${Region}:${Account}:app/.*"
    ],
    "aoss:addcollectiontocollectiongroup": [
      "arn:${Partition}:aoss:${Region}:${Account}:collection-group/.*"
    ],
    "aoss:apiaccessall": [
      "arn:${Partition}:aoss:${Region}:${Account}:collection/.*"
    ],
    "aoss:dashboardsaccessall": [
      "arn:${Partition}:aoss:${Region}:${Account}:dashboards/default"
    ],
    "aoss:deletecollection": [
      "arn:${Partition}:aoss:${Region}:${Account}:collection/.*"
    ],
    "aoss:deletecollectiongroup": [
      "arn:${Partition}:aoss:${Region}:${Account}:collection-group/.*"
    ],
    "aoss:updatecollection": [
      "arn:${Partition}:aoss:${Region}:${Account}:collection/.*"
    ],
    "aoss:updatecollectiongroup": [
      "arn:${Partition}:aoss:${Region}:${Account}:collection-group/.*"
    ],
    "apigateway:addcertificatetodomain": [
      "arn:${Partition}:apigateway:${Region}::/domainnames/.*",
      "arn:${Partition}:apigateway:${Region}::/domainnames"
    ],
    "apigateway:createaccessassociation": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*"
    ],
    "apigateway:createportal": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portals/.*"
    ],
    "apigateway:createportalproduct": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:createproductpage": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:createproductrestendpointpage": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:createroutingrule": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*"
    ],
    "apigateway:delete": [
      "arn:${Partition}:apigateway:${Region}::/apis/.*",
      "arn:${Partition}:apigateway:${Region}::/apikeys/.*",
      "arn:${Partition}:apigateway:${Region}::/domainnames/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis/.*",
      "arn:${Partition}:apigateway:${Region}::/clientcertificates/.*",
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnameaccessassociations/domainname/.*",
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*",
      "arn:${Partition}:apigateway:${Region}::/tags/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis/models/.*",
      "arn:${Partition}:apigateway:${Region}::/usageplans/.*",
      "arn:${Partition}:apigateway:${Region}::/vpclinks/.*"
    ],
    "apigateway:deleteportal": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portals/.*"
    ],
    "apigateway:deleteportalproduct": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:deleteportalproductsharingpolicy": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:deleteproductpage": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:deleteproductrestendpointpage": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:deleteroutingrule": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*"
    ],
    "apigateway:disableportal": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portals/.*"
    ],
    "apigateway:get": [
      "arn:${Partition}:apigateway:${Region}::/apis/.*",
      "arn:${Partition}:apigateway:${Region}::/account",
      "arn:${Partition}:apigateway:${Region}::/apikeys/.*",
      "arn:${Partition}:apigateway:${Region}::/apikeys",
      "arn:${Partition}:apigateway:${Region}::/domainnames/.*",
      "arn:${Partition}:apigateway:${Region}::/apis",
      "arn:${Partition}:apigateway:${Region}::/restapis/.*",
      "arn:${Partition}:apigateway:${Region}::/clientcertificates/.*",
      "arn:${Partition}:apigateway:${Region}::/clientcertificates",
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnameaccessassociations",
      "arn:${Partition}:apigateway:${Region}::/domainnames",
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis",
      "arn:${Partition}:apigateway:${Region}::/tags/.*",
      "arn:${Partition}:apigateway:${Region}::/usageplans/.*",
      "arn:${Partition}:apigateway:${Region}::/usageplans",
      "arn:${Partition}:apigateway:${Region}::/vpclinks/.*",
      "arn:${Partition}:apigateway:${Region}::/vpclinks"
    ],
    "apigateway:getportal": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portals/.*"
    ],
    "apigateway:getportalproduct": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:getportalproductsharingpolicy": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:getproductpage": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:getproductrestendpointpage": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:getroutingrule": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*"
    ],
    "apigateway:listportalproducts": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:listportals": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portals/.*"
    ],
    "apigateway:listproductpages": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:listproductrestendpointpages": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:listroutingrules": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*"
    ],
    "apigateway:patch": [
      "arn:${Partition}:apigateway:${Region}::/account",
      "arn:${Partition}:apigateway:${Region}::/apis/.*",
      "arn:${Partition}:apigateway:${Region}::/apikeys/.*",
      "arn:${Partition}:apigateway:${Region}::/domainnames/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis/.*",
      "arn:${Partition}:apigateway:${Region}::/clientcertificates/.*",
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis/models/.*",
      "arn:${Partition}:apigateway:${Region}::/usageplans/.*",
      "arn:${Partition}:apigateway:${Region}::/vpclinks/.*"
    ],
    "apigateway:post": [
      "arn:${Partition}:apigateway:${Region}::/apikeys",
      "arn:${Partition}:apigateway:${Region}::/domainnames/.*",
      "arn:${Partition}:apigateway:${Region}::/apis",
      "arn:${Partition}:apigateway:${Region}::/restapis/.*",
      "arn:${Partition}:apigateway:${Region}::/clientcertificates",
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnameaccessassociations",
      "arn:${Partition}:apigateway:${Region}::/domainnames",
      "arn:${Partition}:apigateway:${Region}::/apis/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis",
      "arn:${Partition}:apigateway:${Region}::/usageplans/.*",
      "arn:${Partition}:apigateway:${Region}::/usageplans",
      "arn:${Partition}:apigateway:${Region}::/vpclinks"
    ],
    "apigateway:previewportal": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portals/.*"
    ],
    "apigateway:publishportal": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portals/.*"
    ],
    "apigateway:put": [
      "arn:${Partition}:apigateway:${Region}::/apis/.*",
      "arn:${Partition}:apigateway:${Region}::/apis",
      "arn:${Partition}:apigateway:${Region}::/restapis/.*",
      "arn:${Partition}:apigateway:${Region}::/tags/.*"
    ],
    "apigateway:putportalproductsharingpolicy": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:rejectaccessassociation": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*"
    ],
    "apigateway:removecertificatefromdomain": [
      "arn:${Partition}:apigateway:${Region}::/domainnames/.*",
      "arn:${Partition}:apigateway:${Region}::/domainnames"
    ],
    "apigateway:setwebacl": [
      "arn:${Partition}:apigateway:${Region}::/restapis/.*"
    ],
    "apigateway:updatedomainnamemanagementpolicy": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*"
    ],
    "apigateway:updatedomainnamepolicy": [
      "arn:${Partition}:apigateway:${Region}::/domainnames",
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*"
    ],
    "apigateway:updateportal": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portals/.*"
    ],
    "apigateway:updateportalproduct": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:updateproductpage": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:updateproductrestendpointpage": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/portalproducts/.*"
    ],
    "apigateway:updaterestapipolicy": [
      "arn:${Partition}:apigateway:${Region}::/restapis/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis"
    ],
    "apigateway:updateroutingrule": [
      "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/.*"
    ],
    "app-integrations:createapplication": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:application/.*"
    ],
    "app-integrations:createapplicationassociation": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:application/.*"
    ],
    "app-integrations:createdataintegration": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:createdataintegrationassociation": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:createdataintegrationschedule": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:createeventintegration": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration/.*"
    ],
    "app-integrations:createeventintegrationassociation": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration/.*"
    ],
    "app-integrations:deleteapplication": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:application/.*"
    ],
    "app-integrations:deleteapplicationassociation": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:application-association/.*"
    ],
    "app-integrations:deletedataintegration": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:deletedataintegrationassociation": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration-association/.*"
    ],
    "app-integrations:deleteeventintegration": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration/.*"
    ],
    "app-integrations:deleteeventintegrationassociation": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration-association/.*"
    ],
    "app-integrations:getapplication": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:application/.*"
    ],
    "app-integrations:getdataintegration": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:getdataintegrationexecution": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:getdataintegrationschedule": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:geteventintegration": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration/.*"
    ],
    "app-integrations:listdataintegrationexecutions": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:listdataintegrationschedules": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:listtagsforresource": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:application/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration-association/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration-association/.*"
    ],
    "app-integrations:startdataintegrationexecution": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:tagresource": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:application/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:application-association/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration-association/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration-association/.*"
    ],
    "app-integrations:untagresource": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:application/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:application-association/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration-association/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration/.*",
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration-association/.*"
    ],
    "app-integrations:updateapplication": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:application/.*"
    ],
    "app-integrations:updatedataintegration": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:updatedataintegrationassociation": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration-association/.*"
    ],
    "app-integrations:updatedataintegrationschedule": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:data-integration/.*"
    ],
    "app-integrations:updateeventintegration": [
      "arn:${Partition}:app-integrations:${Region}:${Account}:event-integration/.*"
    ],
    "appconfig:createconfigurationprofile": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:createenvironment": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:createexperimentdefinition": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:createhostedconfigurationversion": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:deleteapplication": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:deleteconfigurationprofile": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:deletedeploymentstrategy": [
      "arn:${Partition}:appconfig:${Region}:${Account}:deploymentstrategy/.*"
    ],
    "appconfig:deleteenvironment": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:deleteexperimentdefinition": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:deleteextension": [
      "arn:${Partition}:appconfig:${Region}:${Account}:extension/.*"
    ],
    "appconfig:deleteextensionassociation": [
      "arn:${Partition}:appconfig:${Region}:${Account}:extensionassociation/.*"
    ],
    "appconfig:deletehostedconfigurationversion": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:getapplication": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:getconfiguration": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:getconfigurationprofile": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:getdeployment": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:getdeploymentstrategy": [
      "arn:${Partition}:appconfig:${Region}:${Account}:deploymentstrategy/.*"
    ],
    "appconfig:getenvironment": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:getexperimentdefinition": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:getexperimentrun": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:getextension": [
      "arn:${Partition}:appconfig:${Region}:${Account}:extension/.*"
    ],
    "appconfig:getextensionassociation": [
      "arn:${Partition}:appconfig:${Region}:${Account}:extensionassociation/.*"
    ],
    "appconfig:gethostedconfigurationversion": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:getlatestconfiguration": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:listconfigurationprofiles": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:listdeployments": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:listenvironments": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:listexperimentrunevents": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:listexperimentruns": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:listhostedconfigurationversions": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:listtagsforresource": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:deploymentstrategy/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:extension/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:extensionassociation/.*"
    ],
    "appconfig:startconfigurationsession": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:startdeployment": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:deploymentstrategy/.*"
    ],
    "appconfig:startexperimentrun": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:stopdeployment": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:stopexperimentrun": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:tagresource": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:deploymentstrategy/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:extension/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:extensionassociation/.*"
    ],
    "appconfig:untagresource": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:deploymentstrategy/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:extension/.*",
      "arn:${Partition}:appconfig:${Region}:${Account}:extensionassociation/.*"
    ],
    "appconfig:updateapplication": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:updateconfigurationprofile": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:updatedeploymentstrategy": [
      "arn:${Partition}:appconfig:${Region}:${Account}:deploymentstrategy/.*"
    ],
    "appconfig:updateenvironment": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:updateexperimentdefinition": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:updateexperimentrun": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appconfig:updateextension": [
      "arn:${Partition}:appconfig:${Region}:${Account}:extension/.*"
    ],
    "appconfig:updateextensionassociation": [
      "arn:${Partition}:appconfig:${Region}:${Account}:extensionassociation/.*"
    ],
    "appconfig:validateconfiguration": [
      "arn:${Partition}:appconfig:${Region}:${Account}:application/.*"
    ],
    "appfabric:batchgetuseraccesstasks": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:connectappauthorization": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:createappauthorization": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:createingestion": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:createingestiondestination": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:deleteappauthorization": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:deleteappbundle": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:deleteingestion": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:deleteingestiondestination": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:getappauthorization": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:getappbundle": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:getingestion": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:getingestiondestination": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:listappauthorizations": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:listingestiondestinations": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:listingestions": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:listtagsforresource": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:startingestion": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:startuseraccesstasks": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:stopingestion": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:tagresource": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:untagresource": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:updateappauthorization": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appfabric:updateingestiondestination": [
      "arn:${Partition}:appfabric:${Region}:${Account}:appbundle/.*"
    ],
    "appflow:cancelflowexecutions": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:deleteconnectorprofile": [
      "arn:${Partition}:appflow:${Region}:${Account}:connectorprofile/.*"
    ],
    "appflow:deleteflow": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:describeconnector": [
      "arn:${Partition}:appflow:${Region}:${Account}:connector/.*"
    ],
    "appflow:describeconnectorentity": [
      "arn:${Partition}:appflow:${Region}:${Account}:connectorprofile/.*"
    ],
    "appflow:describeconnectorfields": [
      "arn:${Partition}:appflow:${Region}:${Account}:connectorprofile/.*"
    ],
    "appflow:describeflow": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:describeflowexecution": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:describeflowexecutionrecords": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:listconnectorentities": [
      "arn:${Partition}:appflow:${Region}:${Account}:connectorprofile/.*"
    ],
    "appflow:listconnectorfields": [
      "arn:${Partition}:appflow:${Region}:${Account}:connectorprofile/.*"
    ],
    "appflow:listconnectors": [
      "arn:${Partition}:appflow:${Region}:${Account}:connector/.*"
    ],
    "appflow:listflows": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:listtagsforresource": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:resetconnectormetadatacache": [
      "arn:${Partition}:appflow:${Region}:${Account}:connectorprofile/.*"
    ],
    "appflow:runflow": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:startflow": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:stopflow": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:tagresource": [
      "arn:${Partition}:appflow:${Region}:${Account}:connector/.*",
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:unregisterconnector": [
      "arn:${Partition}:appflow:${Region}:${Account}:connector/.*"
    ],
    "appflow:untagresource": [
      "arn:${Partition}:appflow:${Region}:${Account}:connector/.*",
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:updateconnectorprofile": [
      "arn:${Partition}:appflow:${Region}:${Account}:connectorprofile/.*"
    ],
    "appflow:updateconnectorregistration": [
      "arn:${Partition}:appflow:${Region}:${Account}:connector/.*"
    ],
    "appflow:updateflow": [
      "arn:${Partition}:appflow:${Region}:${Account}:flow/.*"
    ],
    "appflow:useconnectorprofile": [
      "arn:${Partition}:appflow:${Region}:${Account}:connectorprofile/.*"
    ],
    "application-autoscaling:deletescalingpolicy": [
      "arn:${Partition}:application-autoscaling:${Region}:${Account}:scalable-target/.*"
    ],
    "application-autoscaling:deletescheduledaction": [
      "arn:${Partition}:application-autoscaling:${Region}:${Account}:scalable-target/.*"
    ],
    "application-autoscaling:deregisterscalabletarget": [
      "arn:${Partition}:application-autoscaling:${Region}:${Account}:scalable-target/.*"
    ],
    "application-autoscaling:listtagsforresource": [
      "arn:${Partition}:application-autoscaling:${Region}:${Account}:scalable-target/.*"
    ],
    "application-autoscaling:putscalingpolicy": [
      "arn:${Partition}:application-autoscaling:${Region}:${Account}:scalable-target/.*"
    ],
    "application-autoscaling:putscheduledaction": [
      "arn:${Partition}:application-autoscaling:${Region}:${Account}:scalable-target/.*"
    ],
    "application-autoscaling:registerscalabletarget": [
      "arn:${Partition}:application-autoscaling:${Region}:${Account}:scalable-target/.*"
    ],
    "application-autoscaling:tagresource": [
      "arn:${Partition}:application-autoscaling:${Region}:${Account}:scalable-target/.*"
    ],
    "application-autoscaling:untagresource": [
      "arn:${Partition}:application-autoscaling:${Region}:${Account}:scalable-target/.*"
    ],
    "application-signals-mcp:callreadonlytool": [
      "arn:${Partition}:application-signals-mcp:${Region}:${Account}:mcp-server/*"
    ],
    "application-signals-mcp:invokemcp": [
      "arn:${Partition}:application-signals-mcp:${Region}:${Account}:mcp-server/*"
    ],
    "application-signals:batchdeleteinstrumentationconfigurations": [
      "arn:${Partition}:application-signals:${Region}:${Account}:instrumentationConfig/.*"
    ],
    "application-signals:batchgetservicelevelobjectivebudgetreport": [
      "arn:${Partition}:application-signals:${Region}:${Account}:slo/.*"
    ],
    "application-signals:batchupdateexclusionwindows": [
      "arn:${Partition}:application-signals:${Region}:${Account}:slo/.*"
    ],
    "application-signals:deleteinstrumentationconfiguration": [
      "arn:${Partition}:application-signals:${Region}:${Account}:instrumentationConfig/.*"
    ],
    "application-signals:deleteservicelevelobjective": [
      "arn:${Partition}:application-signals:${Region}:${Account}:slo/.*"
    ],
    "application-signals:getinstrumentationconfiguration": [
      "arn:${Partition}:application-signals:${Region}:${Account}:instrumentationConfig/.*"
    ],
    "application-signals:getinstrumentationconfigurationstatus": [
      "arn:${Partition}:application-signals:${Region}:${Account}:instrumentationConfig/.*"
    ],
    "application-signals:getservicelevelobjective": [
      "arn:${Partition}:application-signals:${Region}:${Account}:slo/.*"
    ],
    "application-signals:listservicelevelobjectiveexclusionwindows": [
      "arn:${Partition}:application-signals:${Region}:${Account}:slo/.*"
    ],
    "application-signals:listtagsforresource": [
      "arn:${Partition}:application-signals:${Region}:${Account}:instrumentationConfig/.*",
      "arn:${Partition}:application-signals:${Region}:${Account}:slo/.*"
    ],
    "application-signals:reportinstrumentationconfigurationstatus": [
      "arn:${Partition}:application-signals:${Region}:${Account}:instrumentationConfig/.*"
    ],
    "application-signals:tagresource": [
      "arn:${Partition}:application-signals:${Region}:${Account}:instrumentationConfig/.*",
      "arn:${Partition}:application-signals:${Region}:${Account}:slo/.*"
    ],
    "application-signals:untagresource": [
      "arn:${Partition}:application-signals:${Region}:${Account}:instrumentationConfig/.*",
      "arn:${Partition}:application-signals:${Region}:${Account}:slo/.*"
    ],
    "application-signals:updateservicelevelobjective": [
      "arn:${Partition}:application-signals:${Region}:${Account}:slo/.*"
    ],
    "appmesh-preview:creategatewayroute": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:createmesh": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:createroute": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:createvirtualgateway": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:createvirtualnode": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:createvirtualrouter": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:createvirtualservice": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:deletegatewayroute": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:deletemesh": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:deletemeshpolicy": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:deleteroute": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:deletevirtualgateway": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:deletevirtualnode": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:deletevirtualrouter": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:deletevirtualservice": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:describegatewayroute": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:describemesh": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:describeroute": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:describevirtualgateway": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:describevirtualnode": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:describevirtualrouter": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:describevirtualservice": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:getmeshpolicy": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:listgatewayroutes": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:listroutes": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:listvirtualgateways": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:listvirtualnodes": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:listvirtualrouters": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:listvirtualservices": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:putmeshpolicy": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:streamaggregatedresources": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:updategatewayroute": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:updatemesh": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:updateroute": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:updatevirtualgateway": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:updatevirtualnode": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:updatevirtualrouter": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh-preview:updatevirtualservice": [
      "arn:${Partition}:appmesh-preview:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:creategatewayroute": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:createmesh": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:createroute": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:createvirtualgateway": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:createvirtualnode": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:createvirtualrouter": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:createvirtualservice": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:deletegatewayroute": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:deletemesh": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:deletemeshpolicy": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:deleteroute": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:deletevirtualgateway": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:deletevirtualnode": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:deletevirtualrouter": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:deletevirtualservice": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:describegatewayroute": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:describemesh": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:describeroute": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:describevirtualgateway": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:describevirtualnode": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:describevirtualrouter": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:describevirtualservice": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:getmeshpolicy": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:listgatewayroutes": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:listroutes": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:listtagsforresource": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:listvirtualgateways": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:listvirtualnodes": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:listvirtualrouters": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:listvirtualservices": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:putmeshpolicy": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:streamaggregatedresources": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:tagresource": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:untagresource": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:updategatewayroute": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:updatemesh": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:updateroute": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:updatevirtualgateway": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:updatevirtualnode": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:updatevirtualrouter": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "appmesh:updatevirtualservice": [
      "arn:${Partition}:appmesh:${Region}:${Account}:mesh/.*"
    ],
    "apprunner:associatecustomdomain": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:associatewebacl": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "apprunner:createautoscalingconfiguration": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*"
    ],
    "apprunner:createconnection": [
      "arn:${Partition}:apprunner:${Region}:${Account}:connection/.*"
    ],
    "apprunner:createobservabilityconfiguration": [
      "arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/.*"
    ],
    "apprunner:createservice": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:connection/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/.*"
    ],
    "apprunner:createvpcconnector": [
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/.*"
    ],
    "apprunner:createvpcingressconnection": [
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcingressconnection/.*"
    ],
    "apprunner:deleteautoscalingconfiguration": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*"
    ],
    "apprunner:deleteconnection": [
      "arn:${Partition}:apprunner:${Region}:${Account}:connection/.*"
    ],
    "apprunner:deleteobservabilityconfiguration": [
      "arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/.*"
    ],
    "apprunner:deleteservice": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:deletevpcconnector": [
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/.*"
    ],
    "apprunner:deletevpcingressconnection": [
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcingressconnection/.*"
    ],
    "apprunner:describeautoscalingconfiguration": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*"
    ],
    "apprunner:describecustomdomains": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:describeobservabilityconfiguration": [
      "arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/.*"
    ],
    "apprunner:describeoperation": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:describeservice": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:describevpcconnector": [
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/.*"
    ],
    "apprunner:describevpcingressconnection": [
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcingressconnection/.*"
    ],
    "apprunner:describewebaclforservice": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:disassociatecustomdomain": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:disassociatewebacl": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:listassociatedservicesforwebacl": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "apprunner:listoperations": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:listservicesforautoscalingconfiguration": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*"
    ],
    "apprunner:listtagsforresource": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:connection/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/.*"
    ],
    "apprunner:pauseservice": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:resumeservice": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:startdeployment": [
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*"
    ],
    "apprunner:tagresource": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:connection/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcingressconnection/.*"
    ],
    "apprunner:untagresource": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:connection/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcingressconnection/.*"
    ],
    "apprunner:updatedefaultautoscalingconfiguration": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*"
    ],
    "apprunner:updateservice": [
      "arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:connection/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/.*"
    ],
    "apprunner:updatevpcingressconnection": [
      "arn:${Partition}:apprunner:${Region}:${Account}:vpcingressconnection/.*"
    ],
    "appstream:associateappblockbuilderappblock": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*"
    ],
    "appstream:associateapplicationfleet": [
      "arn:${Partition}:appstream:${Region}:${Account}:application/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*"
    ],
    "appstream:associateapplicationtoentitlement": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:associatefleet": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:associatesoftwaretoimagebuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*"
    ],
    "appstream:batchassociateuserstack": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:batchdisassociateuserstack": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:copyimage": [
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*"
    ],
    "appstream:createappblockbuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*"
    ],
    "appstream:createappblockbuilderstreamingurl": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*"
    ],
    "appstream:createapplication": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block/.*"
    ],
    "appstream:createentitlement": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:createfleet": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*"
    ],
    "appstream:createimagebuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*"
    ],
    "appstream:createimagebuilderstreamingurl": [
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*"
    ],
    "appstream:createstack": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:createstreamingurl": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:createthemeforstack": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:createupdatedimage": [
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*"
    ],
    "appstream:deleteappblock": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block/.*"
    ],
    "appstream:deleteappblockbuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*"
    ],
    "appstream:deleteapplication": [
      "arn:${Partition}:appstream:${Region}:${Account}:application/.*"
    ],
    "appstream:deleteentitlement": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:deletefleet": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*"
    ],
    "appstream:deleteimage": [
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*"
    ],
    "appstream:deleteimagebuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*"
    ],
    "appstream:deleteimagepermissions": [
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*"
    ],
    "appstream:deletestack": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:deletethemeforstack": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:describeentitlements": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:describeimagepermissions": [
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*"
    ],
    "appstream:describesessions": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:describesoftwareassociations": [
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*"
    ],
    "appstream:describethemeforstack": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:disassociateappblockbuilderappblock": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*"
    ],
    "appstream:disassociateapplicationfleet": [
      "arn:${Partition}:appstream:${Region}:${Account}:application/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*"
    ],
    "appstream:disassociateapplicationfromentitlement": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:disassociatefleet": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:disassociatesoftwarefromimagebuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*"
    ],
    "appstream:listassociatedfleets": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:listassociatedstacks": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*"
    ],
    "appstream:listentitledapplications": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:startappblockbuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*"
    ],
    "appstream:startfleet": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*"
    ],
    "appstream:startimagebuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*"
    ],
    "appstream:startsoftwaredeploymenttoimagebuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*"
    ],
    "appstream:stopappblockbuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*"
    ],
    "appstream:stopfleet": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*"
    ],
    "appstream:stopimagebuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*"
    ],
    "appstream:stream": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:tagresource": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:application/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:untagresource": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:application/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:image-builder/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:updateappblockbuilder": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block-builder/.*"
    ],
    "appstream:updateapplication": [
      "arn:${Partition}:appstream:${Region}:${Account}:app-block/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:application/.*"
    ],
    "appstream:updateentitlement": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:updatefleet": [
      "arn:${Partition}:appstream:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*"
    ],
    "appstream:updateimagepermissions": [
      "arn:${Partition}:appstream:${Region}:${Account}:image/.*"
    ],
    "appstream:updatestack": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appstream:updatethemeforstack": [
      "arn:${Partition}:appstream:${Region}:${Account}:stack/.*"
    ],
    "appsync:associateapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:associatemergedgraphqlapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:associatesourcegraphqlapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:associatewebacl": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:createchannelnamespace": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:createdomainname": [
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:deleteapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:deletechannelnamespace": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:deletedomainname": [
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:deletegraphqlapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:disassociateapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:disassociatemergedgraphqlapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:disassociatesourcegraphqlapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:disassociatewebacl": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:eventconnect": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:eventpublish": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:eventsubscribe": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:getapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:getapiassociation": [
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:getchannelnamespace": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:getdomainname": [
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:getgraphqlapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:getsourceapiassociation": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:getwebaclforresource": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:graphql": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:listchannelnamespaces": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:listtagsforresource": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*",
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:sourcegraphql": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:startschemamerge": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:tagresource": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*",
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:untagresource": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*",
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:updateapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:updatechannelnamespace": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:updatedomainname": [
      "arn:${Partition}:appsync:${Region}:${Account}:domainnames/.*"
    ],
    "appsync:updategraphqlapi": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "appsync:updatesourceapiassociation": [
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*"
    ],
    "apptest:deletetestcase": [
      "arn:${Partition}:apptest:${Region}:${Account}:testcase/.*"
    ],
    "apptest:deletetestconfiguration": [
      "arn:${Partition}:apptest:${Region}:${Account}:testconfiguration/.*"
    ],
    "apptest:deletetestrun": [
      "arn:${Partition}:apptest:${Region}:${Account}:testrun/.*"
    ],
    "apptest:deletetestsuite": [
      "arn:${Partition}:apptest:${Region}:${Account}:testsuite/.*"
    ],
    "apptest:gettestcase": [
      "arn:${Partition}:apptest:${Region}:${Account}:testcase/.*"
    ],
    "apptest:gettestconfiguration": [
      "arn:${Partition}:apptest:${Region}:${Account}:testconfiguration/.*"
    ],
    "apptest:gettestrunstep": [
      "arn:${Partition}:apptest:${Region}:${Account}:testrun/.*"
    ],
    "apptest:gettestsuite": [
      "arn:${Partition}:apptest:${Region}:${Account}:testsuite/.*"
    ],
    "apptest:listtestrunsteps": [
      "arn:${Partition}:apptest:${Region}:${Account}:testrun/.*"
    ],
    "apptest:listtestruntestcases": [
      "arn:${Partition}:apptest:${Region}:${Account}:testrun/.*"
    ],
    "apptest:tagresource": [
      "arn:${Partition}:apptest:${Region}:${Account}:testcase/.*",
      "arn:${Partition}:apptest:${Region}:${Account}:testconfiguration/.*",
      "arn:${Partition}:apptest:${Region}:${Account}:testrun/.*",
      "arn:${Partition}:apptest:${Region}:${Account}:testsuite/.*"
    ],
    "apptest:untagresource": [
      "arn:${Partition}:apptest:${Region}:${Account}:testcase/.*",
      "arn:${Partition}:apptest:${Region}:${Account}:testconfiguration/.*",
      "arn:${Partition}:apptest:${Region}:${Account}:testrun/.*",
      "arn:${Partition}:apptest:${Region}:${Account}:testsuite/.*"
    ],
    "apptest:updatetestcase": [
      "arn:${Partition}:apptest:${Region}:${Account}:testcase/.*"
    ],
    "apptest:updatetestconfiguration": [
      "arn:${Partition}:apptest:${Region}:${Account}:testconfiguration/.*"
    ],
    "apptest:updatetestsuite": [
      "arn:${Partition}:apptest:${Region}:${Account}:testsuite/.*"
    ],
    "aps:createalertmanageralerts": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:createalertmanagerdefinition": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:createanomalydetector": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:createloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:createqueryloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:createrulegroupsnamespace": [
      "arn:${Partition}:aps:${Region}:${Account}:rulegroupsnamespace/.*"
    ],
    "aps:createscraper": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:deletealertmanagerdefinition": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:deletealertmanagersilence": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:deleteanomalydetector": [
      "arn:${Partition}:aps:${Region}:${Account}:anomalydetector/.*",
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:deleteloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:deletequeryloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:deleteresourcepolicy": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:deleterulegroupsnamespace": [
      "arn:${Partition}:aps:${Region}:${Account}:rulegroupsnamespace/.*"
    ],
    "aps:deletescraper": [
      "arn:${Partition}:aps:${Region}:${Account}:scraper/.*"
    ],
    "aps:deletescraperloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:scraper/.*"
    ],
    "aps:deleteworkspace": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:describealertmanagerdefinition": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:describeanomalydetector": [
      "arn:${Partition}:aps:${Region}:${Account}:anomalydetector/.*",
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:describeloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:describequeryloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:describeresourcepolicy": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:describerulegroupsnamespace": [
      "arn:${Partition}:aps:${Region}:${Account}:rulegroupsnamespace/.*"
    ],
    "aps:describescraper": [
      "arn:${Partition}:aps:${Region}:${Account}:scraper/.*"
    ],
    "aps:describescraperloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:scraper/.*"
    ],
    "aps:describeworkspace": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:describeworkspaceconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:getalertmanagersilence": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:getalertmanagerstatus": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:getlabels": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:getmetricmetadata": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:getseries": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:listalertmanageralertgroups": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:listalertmanageralerts": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:listalertmanagerreceivers": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:listalertmanagersilences": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:listalerts": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:listanomalydetectors": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:listrulegroupsnamespaces": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:listrules": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:listtagsforresource": [
      "arn:${Partition}:aps:${Region}:${Account}:anomalydetector/.*",
      "arn:${Partition}:aps:${Region}:${Account}:rulegroupsnamespace/.*",
      "arn:${Partition}:aps:${Region}:${Account}:scraper/.*",
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:previewanomalydetector": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:putalertmanagerdefinition": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:putalertmanagersilences": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:putanomalydetector": [
      "arn:${Partition}:aps:${Region}:${Account}:anomalydetector/.*",
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:putresourcepolicy": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:putrulegroupsnamespace": [
      "arn:${Partition}:aps:${Region}:${Account}:rulegroupsnamespace/.*"
    ],
    "aps:querymetrics": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:remotewrite": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:tagresource": [
      "arn:${Partition}:aps:${Region}:${Account}:anomalydetector/.*",
      "arn:${Partition}:aps:${Region}:${Account}:rulegroupsnamespace/.*",
      "arn:${Partition}:aps:${Region}:${Account}:scraper/.*",
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:untagresource": [
      "arn:${Partition}:aps:${Region}:${Account}:anomalydetector/.*",
      "arn:${Partition}:aps:${Region}:${Account}:rulegroupsnamespace/.*",
      "arn:${Partition}:aps:${Region}:${Account}:scraper/.*",
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:updateloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:updatequeryloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:updatescraper": [
      "arn:${Partition}:aps:${Region}:${Account}:scraper/.*",
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:updatescraperloggingconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:scraper/.*"
    ],
    "aps:updateworkspacealias": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "aps:updateworkspaceconfiguration": [
      "arn:${Partition}:aps:${Region}:${Account}:workspace/.*"
    ],
    "arc-region-switch:approveplanexecutionstep": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:cancelplanexecution": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:createplan": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:deleteplan": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:getplan": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:getplanevaluationstatus": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:getplanexecution": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:getplaninregion": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:getresourcepolicy": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:listplanexecutionevents": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:listplanexecutions": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:listroute53healthchecks": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:listroute53healthchecksinregion": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:listtagsforresource": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:startplanexecution": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:tagresource": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:untagresource": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:updateplan": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:updateplanexecution": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-region-switch:updateplanexecutionstep": [
      "arn:${Partition}:arc-region-switch::${Account}:plan/.*"
    ],
    "arc-zonal-shift:cancelpracticerun": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "arc-zonal-shift:cancelzonalshift": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "arc-zonal-shift:createpracticerunconfiguration": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "arc-zonal-shift:deletepracticerunconfiguration": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "arc-zonal-shift:getmanagedresource": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "arc-zonal-shift:startpracticerun": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "arc-zonal-shift:startzonalshift": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "arc-zonal-shift:updatepracticerunconfiguration": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "arc-zonal-shift:updatezonalautoshiftconfiguration": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "arc-zonal-shift:updatezonalshift": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "artifact:acceptagreement": [
      "arn:${Partition}:artifact:::agreement/*"
    ],
    "artifact:acceptndaforagreement": [
      "arn:${Partition}:artifact:::agreement/*"
    ],
    "artifact:createcomplianceinquiry": [
      "arn:${Partition}:artifact:${Region}:${Account}:compliance-inquiry/*"
    ],
    "artifact:exportcomplianceinquiry": [
      "arn:${Partition}:artifact:${Region}:${Account}:compliance-inquiry/*"
    ],
    "artifact:getagreement": [
      "arn:${Partition}:artifact:::agreement/*"
    ],
    "artifact:getcomplianceinquirymetadata": [
      "arn:${Partition}:artifact:${Region}:${Account}:compliance-inquiry/*"
    ],
    "artifact:getcustomeragreement": [
      "arn:${Partition}:artifact::${Account}:customer-agreement/*"
    ],
    "artifact:getndaforagreement": [
      "arn:${Partition}:artifact:::agreement/*"
    ],
    "artifact:getreport": [
      "arn:${Partition}:artifact:${Region}::.*"
    ],
    "artifact:getreportmetadata": [
      "arn:${Partition}:artifact:${Region}::.*"
    ],
    "artifact:gettermforreport": [
      "arn:${Partition}:artifact:${Region}::.*"
    ],
    "artifact:listcomplianceinquiryqueries": [
      "arn:${Partition}:artifact:${Region}:${Account}:compliance-inquiry/*"
    ],
    "artifact:listtagsforresource": [
      "arn:${Partition}:artifact:${Region}:${Account}:compliance-inquiry/*"
    ],
    "artifact:putcomplianceinquiryfeedback": [
      "arn:${Partition}:artifact:${Region}:${Account}:compliance-inquiry/*"
    ],
    "artifact:tagresource": [
      "arn:${Partition}:artifact:${Region}:${Account}:compliance-inquiry/*"
    ],
    "artifact:terminateagreement": [
      "arn:${Partition}:artifact::${Account}:customer-agreement/*"
    ],
    "artifact:untagresource": [
      "arn:${Partition}:artifact:${Region}:${Account}:compliance-inquiry/*"
    ],
    "athena:batchgetnamedquery": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:batchgetpreparedstatement": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:batchgetqueryexecution": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:cancelcapacityreservation": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*"
    ],
    "athena:cancelqueryexecution": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:createcapacityreservation": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*"
    ],
    "athena:createdatacatalog": [
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*"
    ],
    "athena:createnamedquery": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:createnotebook": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:createpreparedstatement": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:createpresignednotebookurl": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:createworkgroup": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:deletecapacityreservation": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*"
    ],
    "athena:deletedatacatalog": [
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*"
    ],
    "athena:deletenamedquery": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:deletenotebook": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:deletepreparedstatement": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:deleteworkgroup": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:exportnotebook": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getcalculationexecution": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getcalculationexecutioncode": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getcalculationexecutionstatus": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getcapacityassignmentconfiguration": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*"
    ],
    "athena:getcapacityreservation": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*"
    ],
    "athena:getdatabase": [
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*"
    ],
    "athena:getdatacatalog": [
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*"
    ],
    "athena:getnamedquery": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getnotebookmetadata": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getpreparedstatement": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getqueryexecution": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getqueryresults": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getqueryresultsstream": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getqueryruntimestatistics": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getresourcedashboard": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getsession": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getsessionendpoint": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:getsessionstatus": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:gettablemetadata": [
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*"
    ],
    "athena:getworkgroup": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:importnotebook": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:listcalculationexecutions": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:listdatabases": [
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*"
    ],
    "athena:listnamedqueries": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:listnotebookmetadata": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:listnotebooksessions": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:listpreparedstatements": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:listqueryexecutions": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:listsessions": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:listtablemetadata": [
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*"
    ],
    "athena:listtagsforresource": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*",
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:putcapacityassignmentconfiguration": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:startcalculationexecution": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:startqueryexecution": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:startsession": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:stopcalculationexecution": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:stopqueryexecution": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:tagresource": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*",
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:terminatesession": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:untagresource": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*",
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:updatecapacityreservation": [
      "arn:${Partition}:athena:${Region}:${Account}:capacity-reservation/.*"
    ],
    "athena:updatedatacatalog": [
      "arn:${Partition}:athena:${Region}:${Account}:datacatalog/.*"
    ],
    "athena:updatenamedquery": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:updatenotebook": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:updatenotebookmetadata": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:updatepreparedstatement": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "athena:updateworkgroup": [
      "arn:${Partition}:athena:${Region}:${Account}:workgroup/.*"
    ],
    "auditmanager:associateassessmentreportevidencefolder": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:batchassociateassessmentreportevidence": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:batchcreatedelegationbyassessment": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:batchdeletedelegationbyassessment": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:batchdisassociateassessmentreportevidence": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:batchimportevidencetoassessmentcontrol": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:createassessmentframework": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/.*",
      "arn:${Partition}:auditmanager:${Region}:${Account}:control/.*"
    ],
    "auditmanager:createassessmentreport": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:deleteassessment": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:deleteassessmentframework": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/.*"
    ],
    "auditmanager:deleteassessmentreport": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:deletecontrol": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:control/.*"
    ],
    "auditmanager:disassociateassessmentreportevidencefolder": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:getassessment": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:getassessmentframework": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/.*"
    ],
    "auditmanager:getassessmentreporturl": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:getchangelogs": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:getcontrol": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:control/.*"
    ],
    "auditmanager:getevidence": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:getevidencebyevidencefolder": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:getevidencefolder": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:getevidencefoldersbyassessment": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:getevidencefoldersbyassessmentcontrol": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:listtagsforresource": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*",
      "arn:${Partition}:auditmanager:${Region}:${Account}:control/.*"
    ],
    "auditmanager:startassessmentframeworkshare": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/.*"
    ],
    "auditmanager:tagresource": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*",
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/.*",
      "arn:${Partition}:auditmanager:${Region}:${Account}:control/.*"
    ],
    "auditmanager:untagresource": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*",
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/.*",
      "arn:${Partition}:auditmanager:${Region}:${Account}:control/.*"
    ],
    "auditmanager:updateassessment": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:updateassessmentcontrol": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:updateassessmentcontrolsetstatus": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:updateassessmentframework": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/.*",
      "arn:${Partition}:auditmanager:${Region}:${Account}:control/.*"
    ],
    "auditmanager:updateassessmentframeworkshare": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/.*"
    ],
    "auditmanager:updateassessmentstatus": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/.*"
    ],
    "auditmanager:updatecontrol": [
      "arn:${Partition}:auditmanager:${Region}:${Account}:control/.*"
    ],
    "autoscaling:attachinstances": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:attachloadbalancers": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:attachloadbalancertargetgroups": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:attachtrafficsources": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:batchdeletescheduledaction": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:batchputscheduledupdategroupaction": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:cancelinstancerefresh": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:completelifecycleaction": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:createautoscalinggroup": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:createlaunchconfiguration": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:launchConfiguration:.*"
    ],
    "autoscaling:createorupdatetags": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:deleteautoscalinggroup": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:deletelaunchconfiguration": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:launchConfiguration:.*"
    ],
    "autoscaling:deletelifecyclehook": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:deletenotificationconfiguration": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:deletepolicy": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:deletescheduledaction": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:deletetags": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:deletewarmpool": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:detachinstances": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:detachloadbalancers": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:detachloadbalancertargetgroups": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:detachtrafficsources": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:disablemetricscollection": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:enablemetricscollection": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:enterstandby": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:executepolicy": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:exitstandby": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:launchinstances": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:putlifecyclehook": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:putnotificationconfiguration": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:putscalingpolicy": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:putscheduledupdategroupaction": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:putwarmpool": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:recordlifecycleactionheartbeat": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:resumeprocesses": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:rollbackinstancerefresh": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:setdesiredcapacity": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:setinstancehealth": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:setinstanceprotection": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:startinstancerefresh": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:suspendprocesses": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:terminateinstanceinautoscalinggroup": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "autoscaling:updateautoscalinggroup": [
      "arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:.*"
    ],
    "aws-external-anthropic:archiveagent": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:archiveenvironment": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:archivememorystore": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:archivesession": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:archivevault": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:archiveworkspace": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:cancelbatchinference": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:counttokens": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createagent": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createbatchinference": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createenvironment": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createfile": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createinference": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:creatememorystore": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createsession": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createskill": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createuserprofile": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createuserprofileenrollmenturl": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createvault": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:createwebhook": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:deletebatchinference": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:deleteenvironment": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:deletefile": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:deletememorystore": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:deletesession": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:deleteskill": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:deletevault": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:deletewebhook": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getagent": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getbatchinference": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getenvironment": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getfile": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getmemorystore": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getmodel": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getsession": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getskill": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getuserprofile": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getvault": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getwebhook": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:getworkspace": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listagents": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listbatchinferences": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listenvironments": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listfiles": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listmemorystores": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listmodels": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listsessions": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listskills": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listtagsforresource": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listuserprofiles": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listvaults": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:listwebhooks": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:processenvironmentwork": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:rotatewebhooksecret": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:tagresource": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:untagresource": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:updateagent": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:updateenvironment": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:updatememorystore": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:updatesession": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:updateskill": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:updateuserprofile": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:updatevault": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:updatewebhook": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-external-anthropic:updateworkspace": [
      "arn:${Partition}:aws-external-anthropic:${Region}:${Account}:workspace/.*"
    ],
    "aws-marketplace:cancelchangeset": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*"
    ],
    "aws-marketplace:createverificationevidence": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/.*"
    ],
    "aws-marketplace:deleteresourcepolicy": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*"
    ],
    "aws-marketplace:describeassessment": [
      "arn:${Partition}:aws-marketplace:${Region}::.*"
    ],
    "aws-marketplace:describechangeset": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*"
    ],
    "aws-marketplace:describeentity": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*"
    ],
    "aws-marketplace:getbuyerdashboard": [
      "arn:${Partition}:aws-marketplace::${Account}:.*"
    ],
    "aws-marketplace:getinvoicesubmissiontask": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/.*"
    ],
    "aws-marketplace:getissuedtaxinvoice": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/.*"
    ],
    "aws-marketplace:getlisting": [
      "arn:${Partition}:aws-marketplace:::catalog/.*"
    ],
    "aws-marketplace:getoffer": [
      "arn:${Partition}:aws-marketplace:::catalog/.*"
    ],
    "aws-marketplace:getofferset": [
      "arn:${Partition}:aws-marketplace:::catalog/.*"
    ],
    "aws-marketplace:getofferterms": [
      "arn:${Partition}:aws-marketplace:::catalog/.*"
    ],
    "aws-marketplace:getproduct": [
      "arn:${Partition}:aws-marketplace:::catalog/.*"
    ],
    "aws-marketplace:getresourcepolicy": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*"
    ],
    "aws-marketplace:getsellerdashboard": [
      "arn:${Partition}:aws-marketplace::${Account}:.*"
    ],
    "aws-marketplace:gettaxcomplianceprofile": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile/.*"
    ],
    "aws-marketplace:getverificationevidence": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/.*"
    ],
    "aws-marketplace:listfulfillmentoptions": [
      "arn:${Partition}:aws-marketplace:::catalog/.*"
    ],
    "aws-marketplace:listpurchaseoptions": [
      "arn:${Partition}:aws-marketplace:::catalog/.*"
    ],
    "aws-marketplace:listtagsforresource": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:DeploymentParameter:.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile/.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile-change-task/.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/.*"
    ],
    "aws-marketplace:putdeploymentparameter": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:DeploymentParameter:.*"
    ],
    "aws-marketplace:putresourcepolicy": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*"
    ],
    "aws-marketplace:searchfacets": [
      "arn:${Partition}:aws-marketplace:::catalog/.*"
    ],
    "aws-marketplace:searchlistings": [
      "arn:${Partition}:aws-marketplace:::catalog/.*"
    ],
    "aws-marketplace:startchangeset": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*"
    ],
    "aws-marketplace:startinvoicesubmissiontask": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/.*"
    ],
    "aws-marketplace:starttaxcomplianceprofilechangetask": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile-change-task/.*"
    ],
    "aws-marketplace:startverification": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/.*"
    ],
    "aws-marketplace:tagresource": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:DeploymentParameter:.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile/.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile-change-task/.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/.*"
    ],
    "aws-marketplace:untagresource": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:DeploymentParameter:.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile/.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile-change-task/.*",
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/.*"
    ],
    "aws-marketplace:updateverificationevidence": [
      "arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/.*"
    ],
    "b2bi:createcapability": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:createpartnership": [
      "arn:${Partition}:b2bi:${Region}:${Account}:capability/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:profile/.*"
    ],
    "b2bi:createstartermappingtemplate": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:deletecapability": [
      "arn:${Partition}:b2bi:${Region}:${Account}:capability/.*"
    ],
    "b2bi:deletepartnership": [
      "arn:${Partition}:b2bi:${Region}:${Account}:partnership/.*"
    ],
    "b2bi:deleteprofile": [
      "arn:${Partition}:b2bi:${Region}:${Account}:profile/.*"
    ],
    "b2bi:deletetransformer": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:generatemapping": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:getcapability": [
      "arn:${Partition}:b2bi:${Region}:${Account}:capability/.*"
    ],
    "b2bi:getpartnership": [
      "arn:${Partition}:b2bi:${Region}:${Account}:partnership/.*"
    ],
    "b2bi:getprofile": [
      "arn:${Partition}:b2bi:${Region}:${Account}:profile/.*"
    ],
    "b2bi:gettransformer": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:gettransformerjob": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:listtagsforresource": [
      "arn:${Partition}:b2bi:${Region}:${Account}:capability/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:partnership/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:profile/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:starttransformerjob": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:tagresource": [
      "arn:${Partition}:b2bi:${Region}:${Account}:capability/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:partnership/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:profile/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:testconversion": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:testmapping": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:testparsing": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:untagresource": [
      "arn:${Partition}:b2bi:${Region}:${Account}:capability/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:partnership/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:profile/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:updatecapability": [
      "arn:${Partition}:b2bi:${Region}:${Account}:capability/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "b2bi:updatepartnership": [
      "arn:${Partition}:b2bi:${Region}:${Account}:capability/.*",
      "arn:${Partition}:b2bi:${Region}:${Account}:partnership/.*"
    ],
    "b2bi:updateprofile": [
      "arn:${Partition}:b2bi:${Region}:${Account}:profile/.*"
    ],
    "b2bi:updatetransformer": [
      "arn:${Partition}:b2bi:${Region}:${Account}:transformer/.*"
    ],
    "backup-gateway:associategatewaytoserver": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*"
    ],
    "backup-gateway:backup": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:vm/.*"
    ],
    "backup-gateway:deletegateway": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-gateway:deletehypervisor": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*"
    ],
    "backup-gateway:disassociategatewayfromserver": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-gateway:getbandwidthratelimitschedule": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-gateway:getgateway": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-gateway:gethypervisor": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*"
    ],
    "backup-gateway:gethypervisorpropertymappings": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*"
    ],
    "backup-gateway:getvirtualmachine": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:vm/.*"
    ],
    "backup-gateway:listtagsforresource": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*",
      "arn:${Partition}:backup-gateway:${Region}:${Account}:vm/.*"
    ],
    "backup-gateway:putbandwidthratelimitschedule": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-gateway:puthypervisorpropertymappings": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*"
    ],
    "backup-gateway:putmaintenancestarttime": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-gateway:restore": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*"
    ],
    "backup-gateway:startvirtualmachinesmetadatasync": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*"
    ],
    "backup-gateway:tagresource": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*",
      "arn:${Partition}:backup-gateway:${Region}:${Account}:vm/.*"
    ],
    "backup-gateway:testhypervisorconfiguration": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-gateway:untagresource": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/.*",
      "arn:${Partition}:backup-gateway:${Region}:${Account}:vm/.*"
    ],
    "backup-gateway:updategatewayinformation": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-gateway:updategatewaysoftwarenow": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-gateway:updatehypervisor": [
      "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/.*"
    ],
    "backup-search:getsearchjob": [
      "arn:${Partition}:backup-search:${Region}:${Account}:search-job/.*"
    ],
    "backup-search:getsearchresultexportjob": [
      "arn:${Partition}:backup-search:${Region}:${Account}:search-export-job/.*"
    ],
    "backup-search:listsearchjobbackups": [
      "arn:${Partition}:backup-search:${Region}:${Account}:search-job/.*"
    ],
    "backup-search:listsearchjobresults": [
      "arn:${Partition}:backup-search:${Region}:${Account}:search-job/.*"
    ],
    "backup-search:listtagsforresource": [
      "arn:${Partition}:backup-search:${Region}:${Account}:search-export-job/.*",
      "arn:${Partition}:backup-search:${Region}:${Account}:search-job/.*"
    ],
    "backup-search:startsearchresultexportjob": [
      "arn:${Partition}:backup-search:${Region}:${Account}:search-job/.*"
    ],
    "backup-search:stopsearchjob": [
      "arn:${Partition}:backup-search:${Region}:${Account}:search-job/.*"
    ],
    "backup-search:tagresource": [
      "arn:${Partition}:backup-search:${Region}:${Account}:search-export-job/.*",
      "arn:${Partition}:backup-search:${Region}:${Account}:search-job/.*"
    ],
    "backup-search:untagresource": [
      "arn:${Partition}:backup-search:${Region}:${Account}:search-export-job/.*",
      "arn:${Partition}:backup-search:${Region}:${Account}:search-job/.*"
    ],
    "backup:associatebackupvaultmpaapprovalteam": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:cancellegalhold": [
      "arn:${Partition}:backup:${Region}:${Account}:legal-hold:.*"
    ],
    "backup:copyfrombackupvault": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:copyintobackupvault": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:createbackupaccesspoint": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:createbackupplan": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*"
    ],
    "backup:createbackupselection": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*"
    ],
    "backup:createbackupvault": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:createframework": [
      "arn:${Partition}:backup:${Region}:${Account}:framework:.*"
    ],
    "backup:createlegalhold": [
      "arn:${Partition}:backup:${Region}:${Account}:legal-hold:.*"
    ],
    "backup:createlogicallyairgappedbackupvault": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:createreportplan": [
      "arn:${Partition}:backup:${Region}:${Account}:report-plan:.*"
    ],
    "backup:createrestoreaccessbackupvault": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:createrestoretestingplan": [
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*"
    ],
    "backup:createrestoretestingselection": [
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*"
    ],
    "backup:createtieringconfiguration": [
      "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:.*"
    ],
    "backup:deletebackupaccesspoint": [
      "arn:${Partition}:backup:${Region}:${Account}:accesspoint/.*"
    ],
    "backup:deletebackupplan": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*"
    ],
    "backup:deletebackupselection": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*"
    ],
    "backup:deletebackupvault": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:deletebackupvaultaccesspolicy": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:deletebackupvaultlockconfiguration": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:deletebackupvaultnotifications": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:deletebackupvaultsharingpolicy": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:deleteframework": [
      "arn:${Partition}:backup:${Region}:${Account}:framework:.*"
    ],
    "backup:deleterecoverypoint": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:deletereportplan": [
      "arn:${Partition}:backup:${Region}:${Account}:report-plan:.*"
    ],
    "backup:deleterestoretestingplan": [
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*"
    ],
    "backup:deleterestoretestingselection": [
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*"
    ],
    "backup:deletetieringconfiguration": [
      "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:.*"
    ],
    "backup:describebackupaccesspoint": [
      "arn:${Partition}:backup:${Region}:${Account}:accesspoint/.*"
    ],
    "backup:describebackupvault": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:describeframework": [
      "arn:${Partition}:backup:${Region}:${Account}:framework:.*"
    ],
    "backup:describerecoverypoint": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:describereportplan": [
      "arn:${Partition}:backup:${Region}:${Account}:report-plan:.*"
    ],
    "backup:disassociatebackupvaultmpaapprovalteam": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:disassociaterecoverypoint": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:disassociaterecoverypointfromparent": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:getbackupplan": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*"
    ],
    "backup:getbackupselection": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*"
    ],
    "backup:getbackupvaultaccesspolicy": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:getbackupvaultnotifications": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:getbackupvaultsharingpolicy": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:getlegalhold": [
      "arn:${Partition}:backup:${Region}:${Account}:legal-hold:.*"
    ],
    "backup:getpitrmalwarescanresults": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:getrecoverypointindexdetails": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:getrecoverypointrestoremetadata": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:getrestoretestingplan": [
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*"
    ],
    "backup:getrestoretestingselection": [
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*"
    ],
    "backup:gettieringconfiguration": [
      "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:.*"
    ],
    "backup:listbackupplanversions": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*"
    ],
    "backup:listbackupselections": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*"
    ],
    "backup:listprotectedresourcesbybackupvault": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:listrecoverypointsbybackupvault": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:listrecoverypointsbylegalhold": [
      "arn:${Partition}:backup:${Region}:${Account}:legal-hold:.*"
    ],
    "backup:listrestoreaccessbackupvaults": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:listrestoretestingselections": [
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*"
    ],
    "backup:listtags": [
      "arn:${Partition}:backup:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*",
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*",
      "arn:${Partition}:backup:${Region}:${Account}:framework:.*",
      "arn:${Partition}:backup:${Region}:${Account}:legal-hold:.*",
      "arn:${Partition}:${Vendor}:${Region}:*:.*",
      "arn:${Partition}:backup:${Region}:${Account}:report-plan:.*",
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*",
      "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:.*"
    ],
    "backup:putbackupvaultaccesspolicy": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:putbackupvaultlockconfiguration": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:putbackupvaultnotifications": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:putbackupvaultsharingpolicy": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:revokerestoreaccessbackupvault": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:searchrecoverypoint": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:startbackupjob": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*"
    ],
    "backup:startcopyjob": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:startreportjob": [
      "arn:${Partition}:backup:${Region}:${Account}:report-plan:.*"
    ],
    "backup:startrestorejob": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:startscanjob": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:tagresource": [
      "arn:${Partition}:backup:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*",
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*",
      "arn:${Partition}:backup:${Region}:${Account}:framework:.*",
      "arn:${Partition}:backup:${Region}:${Account}:legal-hold:.*",
      "arn:${Partition}:${Vendor}:${Region}:*:.*",
      "arn:${Partition}:backup:${Region}:${Account}:report-plan:.*",
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*",
      "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:.*"
    ],
    "backup:untagresource": [
      "arn:${Partition}:backup:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*",
      "arn:${Partition}:backup:${Region}:${Account}:backup-vault:.*",
      "arn:${Partition}:backup:${Region}:${Account}:framework:.*",
      "arn:${Partition}:backup:${Region}:${Account}:legal-hold:.*",
      "arn:${Partition}:${Vendor}:${Region}:*:.*",
      "arn:${Partition}:backup:${Region}:${Account}:report-plan:.*",
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*",
      "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:.*"
    ],
    "backup:updatebackupplan": [
      "arn:${Partition}:backup:${Region}:${Account}:backup-plan:.*"
    ],
    "backup:updateframework": [
      "arn:${Partition}:backup:${Region}:${Account}:framework:.*"
    ],
    "backup:updaterecoverypointindexsettings": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:updaterecoverypointlifecycle": [
      "arn:${Partition}:${Vendor}:${Region}:*:.*"
    ],
    "backup:updatereportplan": [
      "arn:${Partition}:backup:${Region}:${Account}:report-plan:.*"
    ],
    "backup:updaterestoretestingplan": [
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*"
    ],
    "backup:updaterestoretestingselection": [
      "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:.*"
    ],
    "backup:updatetieringconfiguration": [
      "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:.*"
    ],
    "batch:canceljob": [
      "arn:${Partition}:batch:${Region}:${Account}:job/.*"
    ],
    "batch:createcomputeenvironment": [
      "arn:${Partition}:batch:${Region}:${Account}:compute-environment/.*"
    ],
    "batch:createconsumableresource": [
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*"
    ],
    "batch:createjobqueue": [
      "arn:${Partition}:batch:${Region}:${Account}:compute-environment/.*",
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*",
      "arn:${Partition}:batch:${Region}:${Account}:scheduling-policy/.*",
      "arn:${Partition}:batch:${Region}:${Account}:service-environment/.*"
    ],
    "batch:createquotashare": [
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*"
    ],
    "batch:createschedulingpolicy": [
      "arn:${Partition}:batch:${Region}:${Account}:scheduling-policy/.*"
    ],
    "batch:createserviceenvironment": [
      "arn:${Partition}:batch:${Region}:${Account}:service-environment/.*"
    ],
    "batch:deletecomputeenvironment": [
      "arn:${Partition}:batch:${Region}:${Account}:compute-environment/.*"
    ],
    "batch:deleteconsumableresource": [
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*"
    ],
    "batch:deletejobqueue": [
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*"
    ],
    "batch:deletequotashare": [
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*"
    ],
    "batch:deleteschedulingpolicy": [
      "arn:${Partition}:batch:${Region}:${Account}:scheduling-policy/.*"
    ],
    "batch:deleteserviceenvironment": [
      "arn:${Partition}:batch:${Region}:${Account}:service-environment/.*"
    ],
    "batch:deregisterjobdefinition": [
      "arn:${Partition}:batch:${Region}:${Account}:.*"
    ],
    "batch:describeconsumableresource": [
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*"
    ],
    "batch:describequotashare": [
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*"
    ],
    "batch:getjobqueuesnapshot": [
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*"
    ],
    "batch:listjobsbyconsumableresource": [
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*"
    ],
    "batch:listquotashares": [
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*"
    ],
    "batch:listtagsforresource": [
      "arn:${Partition}:batch:${Region}:${Account}:compute-environment/.*",
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*",
      "arn:${Partition}:batch:${Region}:${Account}:job/.*",
      "arn:${Partition}:batch:${Region}:${Account}:.*",
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*",
      "arn:${Partition}:batch:${Region}:${Account}:scheduling-policy/.*",
      "arn:${Partition}:batch:${Region}:${Account}:service-environment/.*",
      "arn:${Partition}:batch:${Region}:${Account}:service-job/.*"
    ],
    "batch:registerjobdefinition": [
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*",
      "arn:${Partition}:batch:${Region}:${Account}:job-definition/.*"
    ],
    "batch:setcapacitytags": [
      "arn:${Partition}:batch:${Region}:${Account}:compute-environment/.*"
    ],
    "batch:submitjob": [
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*",
      "arn:${Partition}:batch:${Region}:${Account}:job/.*",
      "arn:${Partition}:batch:${Region}:${Account}:job-definition/.*",
      "arn:${Partition}:batch:${Region}:${Account}:.*",
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*"
    ],
    "batch:submitservicejob": [
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*",
      "arn:${Partition}:batch:${Region}:${Account}:service-job/.*"
    ],
    "batch:tagresource": [
      "arn:${Partition}:batch:${Region}:${Account}:compute-environment/.*",
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*",
      "arn:${Partition}:batch:${Region}:${Account}:job/.*",
      "arn:${Partition}:batch:${Region}:${Account}:.*",
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*",
      "arn:${Partition}:batch:${Region}:${Account}:scheduling-policy/.*",
      "arn:${Partition}:batch:${Region}:${Account}:service-environment/.*",
      "arn:${Partition}:batch:${Region}:${Account}:service-job/.*"
    ],
    "batch:terminatejob": [
      "arn:${Partition}:batch:${Region}:${Account}:job/.*"
    ],
    "batch:terminateservicejob": [
      "arn:${Partition}:batch:${Region}:${Account}:service-job/.*"
    ],
    "batch:untagresource": [
      "arn:${Partition}:batch:${Region}:${Account}:compute-environment/.*",
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*",
      "arn:${Partition}:batch:${Region}:${Account}:job/.*",
      "arn:${Partition}:batch:${Region}:${Account}:.*",
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*",
      "arn:${Partition}:batch:${Region}:${Account}:scheduling-policy/.*",
      "arn:${Partition}:batch:${Region}:${Account}:service-environment/.*",
      "arn:${Partition}:batch:${Region}:${Account}:service-job/.*"
    ],
    "batch:updatecomputeenvironment": [
      "arn:${Partition}:batch:${Region}:${Account}:compute-environment/.*"
    ],
    "batch:updateconsumableresource": [
      "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/.*"
    ],
    "batch:updatejobqueue": [
      "arn:${Partition}:batch:${Region}:${Account}:compute-environment/.*",
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*",
      "arn:${Partition}:batch:${Region}:${Account}:scheduling-policy/.*"
    ],
    "batch:updatequotashare": [
      "arn:${Partition}:batch:${Region}:${Account}:job-queue/.*"
    ],
    "batch:updateschedulingpolicy": [
      "arn:${Partition}:batch:${Region}:${Account}:scheduling-policy/.*"
    ],
    "batch:updateserviceenvironment": [
      "arn:${Partition}:batch:${Region}:${Account}:service-environment/.*"
    ],
    "batch:updateservicejob": [
      "arn:${Partition}:batch:${Region}:${Account}:service-job/.*"
    ],
    "bcm-data-exports:createexport": [
      "arn:${Partition}:billing::${Account}:billingview/.*",
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:table/.*"
    ],
    "bcm-data-exports:deleteexport": [
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:export/.*"
    ],
    "bcm-data-exports:getexecution": [
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:export/.*"
    ],
    "bcm-data-exports:getexport": [
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:export/.*"
    ],
    "bcm-data-exports:gettable": [
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:table/.*"
    ],
    "bcm-data-exports:listexecutions": [
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:export/.*"
    ],
    "bcm-data-exports:listtagsforresource": [
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:export/.*"
    ],
    "bcm-data-exports:tagresource": [
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:export/.*"
    ],
    "bcm-data-exports:untagresource": [
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:export/.*"
    ],
    "bcm-data-exports:updateexport": [
      "arn:${Partition}:billing::${Account}:billingview/.*",
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:export/.*",
      "arn:${Partition}:bcm-data-exports:${Region}:${Account}:table/.*"
    ],
    "bcm-pricing-calculator:createbillestimate": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:createbillscenariocommitmentmodification": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:createbillscenariousagemodification": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:createworkloadestimateusage": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/.*"
    ],
    "bcm-pricing-calculator:deletebillestimate": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-estimate/.*"
    ],
    "bcm-pricing-calculator:deletebillscenario": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:deletebillscenariocommitmentmodification": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:deletebillscenariousagemodification": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:deleteworkloadestimate": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/.*"
    ],
    "bcm-pricing-calculator:deleteworkloadestimateusage": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/.*"
    ],
    "bcm-pricing-calculator:getbillestimate": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-estimate/.*"
    ],
    "bcm-pricing-calculator:getbillscenario": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:getworkloadestimate": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/.*"
    ],
    "bcm-pricing-calculator:listbillestimatecommitments": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-estimate/.*"
    ],
    "bcm-pricing-calculator:listbillestimateinputcommitmentmodifications": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-estimate/.*"
    ],
    "bcm-pricing-calculator:listbillestimateinputusagemodifications": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-estimate/.*"
    ],
    "bcm-pricing-calculator:listbillestimatelineitems": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-estimate/.*"
    ],
    "bcm-pricing-calculator:listbillscenariocommitmentmodifications": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:listbillscenariousagemodifications": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:listworkloadestimateusage": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/.*"
    ],
    "bcm-pricing-calculator:tagresource": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*",
      "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/.*"
    ],
    "bcm-pricing-calculator:untagresource": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*",
      "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/.*"
    ],
    "bcm-pricing-calculator:updatebillestimate": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-estimate/.*"
    ],
    "bcm-pricing-calculator:updatebillscenario": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:updatebillscenariocommitmentmodification": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:updatebillscenariousagemodification": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/.*"
    ],
    "bcm-pricing-calculator:updateworkloadestimate": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/.*"
    ],
    "bcm-pricing-calculator:updateworkloadestimateusage": [
      "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/.*"
    ],
    "bedrock-agentcore:adddatasetexamples": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/.*"
    ],
    "bedrock-agentcore:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:authorizeaction": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:batchcreatememoryrecords": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:batchdeletememoryrecords": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:batchputgatewayratelimits": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:batchupdatememoryrecords": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:completeresourcetokenauth": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:createagentruntimeendpoint": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:createapikeycredentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:createconsentportal": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:consent-portal/.*"
    ],
    "bedrock-agentcore:createdatasetversion": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/.*"
    ],
    "bedrock-agentcore:createevent": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:creategatewayratelimit": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:creategatewayrule": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:creategatewaytarget": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:createharnessendpoint": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*"
    ],
    "bedrock-agentcore:createoauth2credentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:createpaymentconnector": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:createpaymentcredentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:createpaymentinstrument": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:createpaymentsession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:createpolicy": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:createregistryrecord": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:createworkloadidentity": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:deleteabtest": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:ab-test/.*"
    ],
    "bedrock-agentcore:deleteagentruntime": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:deleteagentruntimeendpoint": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:deleteapikeycredentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:deletebatchevaluation": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:batch-evaluate/.*"
    ],
    "bedrock-agentcore:deletebrowser": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*"
    ],
    "bedrock-agentcore:deletebrowserprofile": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/.*"
    ],
    "bedrock-agentcore:deletecapacityprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:capacity-provider/.*"
    ],
    "bedrock-agentcore:deletecapacityprovidersession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:capacity-provider/.*"
    ],
    "bedrock-agentcore:deletecodeinterpreter": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*"
    ],
    "bedrock-agentcore:deleteconfigurationbundle": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/.*"
    ],
    "bedrock-agentcore:deleteconsentportal": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:consent-portal/.*"
    ],
    "bedrock-agentcore:deletedataset": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/.*"
    ],
    "bedrock-agentcore:deletedatasetexamples": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/.*"
    ],
    "bedrock-agentcore:deleteevaluator": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/.*"
    ],
    "bedrock-agentcore:deleteevent": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:deletegateway": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:deletegatewayratelimit": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:deletegatewayrule": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:deletegatewaytarget": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:deleteharness": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*"
    ],
    "bedrock-agentcore:deleteharnessendpoint": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*"
    ],
    "bedrock-agentcore:deletememory": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:deletememoryrecord": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:deleteoauth2credentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:deleteonlineevaluationconfig": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/.*"
    ],
    "bedrock-agentcore:deletepaymentconnector": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:deletepaymentcredentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:deletepaymentinstrument": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:deletepaymentmanager": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:deletepaymentsession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:deletepolicy": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:deletepolicyengine": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:deleterecommendation": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:recommendation/.*"
    ],
    "bedrock-agentcore:deleteregistry": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:deleteregistryrecord": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:deleteresourcepolicy": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:deleteworkloadidentity": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:evaluate": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/.*"
    ],
    "bedrock-agentcore:gatewayassociatewebacl": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:gatewaydisassociatewebacl": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:gatewaygetwebaclforresource": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:getabtest": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:ab-test/.*"
    ],
    "bedrock-agentcore:getagentcard": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:getagentruntime": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:getagentruntimeendpoint": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:getapikeycredentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:getbatchevaluation": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:batch-evaluate/.*"
    ],
    "bedrock-agentcore:getbrowser": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*"
    ],
    "bedrock-agentcore:getbrowserprofile": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/.*"
    ],
    "bedrock-agentcore:getbrowsersession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*"
    ],
    "bedrock-agentcore:getcapacityprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:capacity-provider/.*"
    ],
    "bedrock-agentcore:getcodeinterpreter": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*"
    ],
    "bedrock-agentcore:getcodeinterpretersession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*"
    ],
    "bedrock-agentcore:getconfigurationbundle": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/.*"
    ],
    "bedrock-agentcore:getconfigurationbundleversion": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/.*"
    ],
    "bedrock-agentcore:getconsentportal": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:consent-portal/.*"
    ],
    "bedrock-agentcore:getdataset": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/.*"
    ],
    "bedrock-agentcore:getevaluator": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/.*"
    ],
    "bedrock-agentcore:getevent": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:getgateway": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:getgatewayratelimit": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:getgatewayrule": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:getgatewaytarget": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:getharness": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*"
    ],
    "bedrock-agentcore:getharnessendpoint": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*"
    ],
    "bedrock-agentcore:getmemory": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:getmemoryrecord": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:getoauth2credentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:getonlineevaluationconfig": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/.*"
    ],
    "bedrock-agentcore:getpaymentconnector": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:getpaymentcredentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:getpaymentinstrument": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:getpaymentinstrumentbalance": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:getpaymentmanager": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:getpaymentsession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:getpolicy": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:getpolicyengine": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:getpolicyenginesummary": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:getpolicygeneration": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:getpolicygenerationsummary": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:getpolicysummary": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:getrecommendation": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:recommendation/.*"
    ],
    "bedrock-agentcore:getregistry": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:getregistryrecord": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:getresourceapikey": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:getresourceoauth2token": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:getresourcepaymenttoken": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:getresourcepolicy": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:gettokenvault": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:getworkloadaccesstoken": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:getworkloadaccesstokenforjwt": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:getworkloadaccesstokenforuserid": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:getworkloadidentity": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:invokeagentruntime": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:invokeagentruntimecommand": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:invokeagentruntimecommandshell": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:invokeagentruntimeforuser": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:invokeagentruntimewithwebsocketstream": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:invokeagentruntimewithwebsocketstreamforuser": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:invokecodeinterpreter": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*"
    ],
    "bedrock-agentcore:invokegateway": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:invokeharness": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*"
    ],
    "bedrock-agentcore:invokeregistrymcp": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:invokewebsearch": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:tool/web-search.v1"
    ],
    "bedrock-agentcore:listactors": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:listapikeycredentialproviders": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:listcodeinterpretersessions": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*"
    ],
    "bedrock-agentcore:listconfigurationbundleversions": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/.*"
    ],
    "bedrock-agentcore:listdatasetexamples": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/.*"
    ],
    "bedrock-agentcore:listdatasetversions": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/.*"
    ],
    "bedrock-agentcore:listevents": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:listgatewayratelimits": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:listgatewayrules": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:listgatewaytargets": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:listmemoryextractionjobs": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:listmemoryrecords": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:listoauth2credentialproviders": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:listpaymentconnectors": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:listpaymentcredentialproviders": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:listpaymentinstruments": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:listpaymentsessions": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:listpolicies": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:listpolicygenerationassets": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:listpolicygenerations": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:listpolicygenerationsummaries": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:listpolicysummaries": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:listregistryrecords": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:listsessions": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:listtagsforresource": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:capacity-provider/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:listworkloadidentities": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:manageresourcescopedpolicy": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:partiallyauthorizeactions": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:passcapacityprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:capacity-provider/.*"
    ],
    "bedrock-agentcore:processpayment": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:putresourcepolicy": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:putsystemlogevents": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:capacity-provider/.*"
    ],
    "bedrock-agentcore:retrievememoryrecords": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:savebrowsersessionprofile": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/.*"
    ],
    "bedrock-agentcore:searchregistryrecords": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:settokenvaultcmk": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:startbrowsersession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/.*"
    ],
    "bedrock-agentcore:startcodeinterpretersession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*"
    ],
    "bedrock-agentcore:startmemoryextractionjob": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:startpolicygeneration": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:stopbatchevaluation": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:batch-evaluate/.*"
    ],
    "bedrock-agentcore:stopbrowsersession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*"
    ],
    "bedrock-agentcore:stopcodeinterpretersession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*"
    ],
    "bedrock-agentcore:stopruntimesession": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:submitregistryrecordforapproval": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:synchronizegatewaytargets": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:tagresource": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:capacity-provider/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:untagresource": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:capacity-provider/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-agentcore:updateabtest": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:ab-test/.*"
    ],
    "bedrock-agentcore:updateagentruntime": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:updateagentruntimeendpoint": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/.*"
    ],
    "bedrock-agentcore:updateapikeycredentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:updatebrowserstream": [
      "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/.*",
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/.*"
    ],
    "bedrock-agentcore:updatecapacityprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:capacity-provider/.*"
    ],
    "bedrock-agentcore:updateconfigurationbundle": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/.*"
    ],
    "bedrock-agentcore:updateconsentportal": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:consent-portal/.*"
    ],
    "bedrock-agentcore:updatedataset": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/.*"
    ],
    "bedrock-agentcore:updatedatasetexamples": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/.*"
    ],
    "bedrock-agentcore:updateevaluator": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/.*"
    ],
    "bedrock-agentcore:updategateway": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:updategatewayratelimit": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:updategatewayrule": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:updategatewaytarget": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*"
    ],
    "bedrock-agentcore:updateharness": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*"
    ],
    "bedrock-agentcore:updateharnessendpoint": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/.*"
    ],
    "bedrock-agentcore:updatememory": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/.*"
    ],
    "bedrock-agentcore:updateoauth2credentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:updateonlineevaluationconfig": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/.*"
    ],
    "bedrock-agentcore:updatepaymentconnector": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:updatepaymentcredentialprovider": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/.*"
    ],
    "bedrock-agentcore:updatepaymentmanager": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/.*"
    ],
    "bedrock-agentcore:updatepolicy": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:updatepolicyengine": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/.*"
    ],
    "bedrock-agentcore:updateregistry": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:updateregistryrecord": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:updateregistryrecordstatus": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/.*"
    ],
    "bedrock-agentcore:updateworkloadidentity": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/.*"
    ],
    "bedrock-mantle:archiveproject": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:associatecustomizedmodel": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:cancelfinetuningjob": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:cancelinference": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:counttokens": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:createcustomizedmodel": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*"
    ],
    "bedrock-mantle:createfile": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:createfinetuningjob": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:createinference": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:createproject": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:createreservation": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/.*"
    ],
    "bedrock-mantle:deletecustomizedmodel": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*"
    ],
    "bedrock-mantle:deletefile": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:deleteinference": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:deletereservation": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/.*"
    ],
    "bedrock-mantle:disassociatecustomizedmodel": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:getcustomizedmodel": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*"
    ],
    "bedrock-mantle:getfile": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:getfinetuningjob": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:getinference": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:getmodel": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:getproject": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:getreservation": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/.*"
    ],
    "bedrock-mantle:listcustomizedmodelassociations": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*"
    ],
    "bedrock-mantle:listcustomizedmodels": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*"
    ],
    "bedrock-mantle:listfiles": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:listfinetuningjobs": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:listmodels": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:listprojects": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:listreservations": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/.*"
    ],
    "bedrock-mantle:listtagsforresource": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/.*"
    ],
    "bedrock-mantle:tagresource": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/.*"
    ],
    "bedrock-mantle:untagresource": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/.*"
    ],
    "bedrock-mantle:updateproject": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*"
    ],
    "bedrock-mantle:updatereservation": [
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/.*",
      "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/.*"
    ],
    "bedrock-websearch:invokefetch": [
      "arn:${Partition}:bedrock-websearch:${Region}:aws:tool/.*"
    ],
    "bedrock-websearch:invokesearch": [
      "arn:${Partition}:bedrock-websearch:${Region}:aws:tool/.*"
    ],
    "bedrock:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:applyguardrail": [
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail-profile/.*"
    ],
    "bedrock:associateagentcollaborator": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:associateagentknowledgebase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:batchdeleteadvancedpromptoptimizationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:advanced-prompt-optimization-job/.*"
    ],
    "bedrock:batchdeleteevaluationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:evaluation-job/.*"
    ],
    "bedrock:cancelautomatedreasoningpolicybuildworkflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:cancelinvoke": [
      "arn:${Partition}:bedrock:${Region}:${Account}:project/.*"
    ],
    "bedrock:copyblueprintstage": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*"
    ],
    "bedrock:counttokens": [
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*"
    ],
    "bedrock:createadvancedpromptoptimizationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/.*"
    ],
    "bedrock:createagentactiongroup": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:createagentalias": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:createautomatedreasoningpolicytestcase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:createautomatedreasoningpolicyversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:createblueprintversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*"
    ],
    "bedrock:createcustommodeldeployment": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*"
    ],
    "bedrock:createdataautomationproject": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*"
    ],
    "bedrock:createdatasource": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:createevaluationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:default-prompt-router/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/.*"
    ],
    "bedrock:createflowalias": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:createflowversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:createguardrail": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail-profile/.*"
    ],
    "bedrock:createguardrailversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*"
    ],
    "bedrock:createinferenceprofile": [
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/.*"
    ],
    "bedrock:createinvocation": [
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:createmodelcopyjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*"
    ],
    "bedrock:createmodelcustomizationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*"
    ],
    "bedrock:createmodelevaluationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*"
    ],
    "bedrock:createmodelinvocationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-invocation-job/.*"
    ],
    "bedrock:createpromptrouter": [
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/.*"
    ],
    "bedrock:createpromptversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt/.*"
    ],
    "bedrock:createprovisionedmodelthroughput": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*"
    ],
    "bedrock:deleteagent": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:deleteagentactiongroup": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:deleteagentalias": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/.*"
    ],
    "bedrock:deleteagentmemory": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/.*"
    ],
    "bedrock:deleteagentversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:deleteautomatedreasoningpolicy": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*"
    ],
    "bedrock:deleteautomatedreasoningpolicybuildworkflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:deleteautomatedreasoningpolicytestcase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:deleteblueprint": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*"
    ],
    "bedrock:deletecustommodel": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*"
    ],
    "bedrock:deletecustommodeldeployment": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/.*"
    ],
    "bedrock:deletedataautomationlibrary": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*"
    ],
    "bedrock:deletedataautomationproject": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*"
    ],
    "bedrock:deletedatasource": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:deleteflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:deleteflowalias": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:deleteflowversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:deleteguardrail": [
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*"
    ],
    "bedrock:deleteimportedmodel": [
      "arn:${Partition}:bedrock:${Region}:${Account}:imported-model/.*"
    ],
    "bedrock:deleteinferenceprofile": [
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*"
    ],
    "bedrock:deleteinvoke": [
      "arn:${Partition}:bedrock:${Region}:${Account}:project/.*"
    ],
    "bedrock:deleteknowledgebase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:deleteknowledgebasedocuments": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:deletemarketplacemodelendpoint": [
      "arn:${Partition}:bedrock:${Region}:${Account}:marketplace/model-endpoint/all-access"
    ],
    "bedrock:deleteprompt": [
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*"
    ],
    "bedrock:deletepromptrouter": [
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/.*"
    ],
    "bedrock:deleteprovisionedmodelthroughput": [
      "arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/.*"
    ],
    "bedrock:deleteresourcepolicy": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:deletesession": [
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:deregistermarketplacemodelendpoint": [
      "arn:${Partition}:bedrock:${Region}:${Account}:marketplace/model-endpoint/all-access"
    ],
    "bedrock:detectgeneratedcontent": [
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*"
    ],
    "bedrock:disassociateagentcollaborator": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:disassociateagentknowledgebase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:endsession": [
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:exportautomatedreasoningpolicyversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*"
    ],
    "bedrock:getadvancedpromptoptimizationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:advanced-prompt-optimization-job/.*"
    ],
    "bedrock:getagent": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:getagentactiongroup": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:getagentalias": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/.*"
    ],
    "bedrock:getagentcollaborator": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:getagentknowledgebase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:getagentmemory": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/.*"
    ],
    "bedrock:getagentversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:getasyncinvoke": [
      "arn:${Partition}:bedrock:${Region}:${Account}:async-invoke/.*"
    ],
    "bedrock:getautomatedreasoningpolicy": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*"
    ],
    "bedrock:getautomatedreasoningpolicyannotations": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:getautomatedreasoningpolicybuildworkflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:getautomatedreasoningpolicybuildworkflowresultassets": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:getautomatedreasoningpolicynextscenario": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:getautomatedreasoningpolicytestcase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:getautomatedreasoningpolicytestresult": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:getblueprint": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*"
    ],
    "bedrock:getblueprintoptimizationstatus": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint-optimization-invocation/.*"
    ],
    "bedrock:getcustommodel": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*"
    ],
    "bedrock:getcustommodeldeployment": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/.*"
    ],
    "bedrock:getdataautomationlibrary": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*"
    ],
    "bedrock:getdataautomationlibraryentity": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*"
    ],
    "bedrock:getdataautomationlibraryingestionjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library-ingestion-job/.*"
    ],
    "bedrock:getdataautomationproject": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*"
    ],
    "bedrock:getdataautomationstatus": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-invocation/.*"
    ],
    "bedrock:getdatasource": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:getevaluationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:evaluation-job/.*"
    ],
    "bedrock:getexecutionflowsnapshot": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:getflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:getflowalias": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:getflowexecution": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:getflowversion": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:getfoundationmodel": [
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*"
    ],
    "bedrock:getguardrail": [
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*"
    ],
    "bedrock:getimportedmodel": [
      "arn:${Partition}:bedrock:${Region}:${Account}:imported-model/.*"
    ],
    "bedrock:getinferenceprofile": [
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/.*"
    ],
    "bedrock:getingestionjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:getinvocationstep": [
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:getinvoke": [
      "arn:${Partition}:bedrock:${Region}:${Account}:project/.*"
    ],
    "bedrock:getknowledgebase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:getknowledgebasedocuments": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:getmarketplacemodelendpoint": [
      "arn:${Partition}:bedrock:${Region}:${Account}:marketplace/model-endpoint/all-access"
    ],
    "bedrock:getmodelcopyjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:model-copy-job/.*"
    ],
    "bedrock:getmodelcustomizationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:model-customization-job/.*"
    ],
    "bedrock:getmodelevaluationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:model-evaluation-job/.*"
    ],
    "bedrock:getmodelimportjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:model-import-job/.*"
    ],
    "bedrock:getmodelinvocationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:model-invocation-job/.*"
    ],
    "bedrock:getprompt": [
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*"
    ],
    "bedrock:getpromptrouter": [
      "arn:${Partition}:bedrock:${Region}:${Account}:default-prompt-router/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/.*"
    ],
    "bedrock:getprovisionedmodelthroughput": [
      "arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/.*"
    ],
    "bedrock:getresourcepolicy": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:getsession": [
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:ingestknowledgebasedocuments": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:invokeagent": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/.*"
    ],
    "bedrock:invokeautomatedreasoningpolicy": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*"
    ],
    "bedrock:invokeblueprintoptimizationasync": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-profile/.*"
    ],
    "bedrock:invokeblueprintrecommendationasync": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-profile/.*"
    ],
    "bedrock:invokedataautomation": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*"
    ],
    "bedrock:invokedataautomationasync": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*"
    ],
    "bedrock:invokedataautomationlibraryingestionjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*"
    ],
    "bedrock:invokeflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:invokemodel": [
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:async-invoke/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:marketplace/model-endpoint/all-access",
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:default-prompt-router/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:imported-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:project/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/.*",
      "arn:${Partition}:bedrock::${Account}:system-tool/.*"
    ],
    "bedrock:invokemodelwithresponsestream": [
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:marketplace/model-endpoint/all-access",
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:default-prompt-router/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:imported-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/.*",
      "arn:${Partition}:bedrock::${Account}:system-tool/.*"
    ],
    "bedrock:invoketool": [
      "arn:${Partition}:bedrock::${Account}:system-tool/.*"
    ],
    "bedrock:listagentactiongroups": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:listagentaliases": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:listagentcollaborators": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:listagentknowledgebases": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:listagentversions": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:listautomatedreasoningpolicies": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:listautomatedreasoningpolicybuildworkflows": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:listautomatedreasoningpolicytestcases": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:listautomatedreasoningpolicytestresults": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:listblueprints": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*"
    ],
    "bedrock:listdataautomationlibraries": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*"
    ],
    "bedrock:listdataautomationlibraryentities": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*"
    ],
    "bedrock:listdataautomationlibraryingestionjobs": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*"
    ],
    "bedrock:listdataautomationprojects": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*"
    ],
    "bedrock:listdatasources": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:listflowaliases": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:listflowexecutionevents": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:listflowexecutions": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:listflowversions": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:listguardrails": [
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*"
    ],
    "bedrock:listingestionjobs": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:listinvocations": [
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:listinvocationsteps": [
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:listknowledgebasedocuments": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:listprompts": [
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt/.*"
    ],
    "bedrock:listtagsforresource": [
      "arn:${Partition}:bedrock:${Region}:${Account}:advanced-prompt-optimization-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:async-invoke/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint-optimization-invocation/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-invocation/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library-ingestion-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:evaluation-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:imported-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-copy-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-customization-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-evaluation-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-import-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-invocation-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:prepareagent": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:prepareflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:putinvocationstep": [
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:putresourcepolicy": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:registermarketplacemodelendpoint": [
      "arn:${Partition}:bedrock:${Region}:${Account}:marketplace/model-endpoint/all-access"
    ],
    "bedrock:renderprompt": [
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*"
    ],
    "bedrock:retrieve": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:startautomatedreasoningpolicybuildworkflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:startautomatedreasoningpolicytestworkflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:startflowexecution": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:startingestionjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:stopadvancedpromptoptimizationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:advanced-prompt-optimization-job/.*"
    ],
    "bedrock:stopevaluationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:evaluation-job/.*"
    ],
    "bedrock:stopflowexecution": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:stopingestionjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:stopmodelcustomizationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:model-customization-job/.*"
    ],
    "bedrock:stopmodelinvocationjob": [
      "arn:${Partition}:bedrock:${Region}:${Account}:model-invocation-job/.*"
    ],
    "bedrock:tagresource": [
      "arn:${Partition}:bedrock:${Region}:${Account}:advanced-prompt-optimization-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:async-invoke/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint-optimization-invocation/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-invocation/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library-ingestion-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:evaluation-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:imported-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-copy-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-customization-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-evaluation-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-import-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-invocation-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:untagresource": [
      "arn:${Partition}:bedrock:${Region}:${Account}:advanced-prompt-optimization-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:async-invoke/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint-optimization-invocation/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-invocation/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library-ingestion-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:evaluation-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:imported-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-copy-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-customization-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-evaluation-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-import-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:model-invocation-job/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "bedrock:updateagent": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:updateagentactiongroup": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:updateagentalias": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/.*"
    ],
    "bedrock:updateagentcollaborator": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*"
    ],
    "bedrock:updateagentknowledgebase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:agent/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:updateautomatedreasoningpolicy": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:updateautomatedreasoningpolicyannotations": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:updateautomatedreasoningpolicytestcase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*"
    ],
    "bedrock:updateblueprint": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*"
    ],
    "bedrock:updatecustommodeldeployment": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/.*"
    ],
    "bedrock:updatedataautomationlibrary": [
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/.*"
    ],
    "bedrock:updatedataautomationproject": [
      "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/.*"
    ],
    "bedrock:updatedatasource": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:updateflow": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:updateflowalias": [
      "arn:${Partition}:bedrock:${Region}:${Account}:flow/.*"
    ],
    "bedrock:updateguardrail": [
      "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:guardrail-profile/.*"
    ],
    "bedrock:updateknowledgebase": [
      "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/.*"
    ],
    "bedrock:updatemarketplacemodelendpoint": [
      "arn:${Partition}:bedrock:${Region}:${Account}:marketplace/model-endpoint/all-access"
    ],
    "bedrock:updateprompt": [
      "arn:${Partition}:bedrock:${Region}:${Account}:prompt/.*"
    ],
    "bedrock:updateprovisionedmodelthroughput": [
      "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/.*",
      "arn:${Partition}:bedrock:${Region}::foundation-model/.*",
      "arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/.*"
    ],
    "bedrock:updatesession": [
      "arn:${Partition}:bedrock:${Region}:${Account}:session/.*"
    ],
    "billing:associatesourceviews": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:createbillingview": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:deletebillingview": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:deleteresourcepolicy": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:disassociatesourceviews": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:getbillingdata": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:getbillingdetails": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:getbillingview": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:getbillingviewdata": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:getresourcepolicy": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:listsourceviewsforbillingview": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:listtagsforresource": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:putresourcepolicy": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:tagresource": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:untagresource": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billing:updatebillingview": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "billingconductor:associateaccounts": [
      "arn:${Partition}:billingconductor::${Account}:billinggroup/.*"
    ],
    "billingconductor:associatepricingrules": [
      "arn:${Partition}:billingconductor::${Account}:pricingplan/.*",
      "arn:${Partition}:billingconductor::${Account}:pricingrule/.*"
    ],
    "billingconductor:batchassociateresourcestocustomlineitem": [
      "arn:${Partition}:billingconductor::${Account}:customlineitem/.*"
    ],
    "billingconductor:batchdisassociateresourcesfromcustomlineitem": [
      "arn:${Partition}:billingconductor::${Account}:customlineitem/.*"
    ],
    "billingconductor:createbillinggroup": [
      "arn:${Partition}:billingconductor::${Account}:pricingplan/.*"
    ],
    "billingconductor:createcustomlineitem": [
      "arn:${Partition}:billingconductor::${Account}:billinggroup/.*"
    ],
    "billingconductor:createpricingplan": [
      "arn:${Partition}:billingconductor::${Account}:pricingrule/.*"
    ],
    "billingconductor:deletebillinggroup": [
      "arn:${Partition}:billingconductor::${Account}:billinggroup/.*"
    ],
    "billingconductor:deletecustomlineitem": [
      "arn:${Partition}:billingconductor::${Account}:customlineitem/.*"
    ],
    "billingconductor:deletepricingplan": [
      "arn:${Partition}:billingconductor::${Account}:pricingplan/.*"
    ],
    "billingconductor:deletepricingrule": [
      "arn:${Partition}:billingconductor::${Account}:pricingrule/.*"
    ],
    "billingconductor:disassociateaccounts": [
      "arn:${Partition}:billingconductor::${Account}:billinggroup/.*"
    ],
    "billingconductor:disassociatepricingrules": [
      "arn:${Partition}:billingconductor::${Account}:pricingplan/.*",
      "arn:${Partition}:billingconductor::${Account}:pricingrule/.*"
    ],
    "billingconductor:getbillinggroupcostreport": [
      "arn:${Partition}:billingconductor::${Account}:billinggroup/.*"
    ],
    "billingconductor:listcustomlineitemversions": [
      "arn:${Partition}:billingconductor::${Account}:customlineitem/.*"
    ],
    "billingconductor:listpricingplansassociatedwithpricingrule": [
      "arn:${Partition}:billingconductor::${Account}:pricingrule/.*"
    ],
    "billingconductor:listpricingrulesassociatedtopricingplan": [
      "arn:${Partition}:billingconductor::${Account}:pricingplan/.*"
    ],
    "billingconductor:listresourcesassociatedtocustomlineitem": [
      "arn:${Partition}:billingconductor::${Account}:customlineitem/.*"
    ],
    "billingconductor:listtagsforresource": [
      "arn:${Partition}:billingconductor::${Account}:billinggroup/.*",
      "arn:${Partition}:billingconductor::${Account}:customlineitem/.*",
      "arn:${Partition}:billingconductor::${Account}:pricingplan/.*",
      "arn:${Partition}:billingconductor::${Account}:pricingrule/.*"
    ],
    "billingconductor:tagresource": [
      "arn:${Partition}:billingconductor::${Account}:billinggroup/.*",
      "arn:${Partition}:billingconductor::${Account}:customlineitem/.*",
      "arn:${Partition}:billingconductor::${Account}:pricingplan/.*",
      "arn:${Partition}:billingconductor::${Account}:pricingrule/.*"
    ],
    "billingconductor:untagresource": [
      "arn:${Partition}:billingconductor::${Account}:billinggroup/.*",
      "arn:${Partition}:billingconductor::${Account}:customlineitem/.*",
      "arn:${Partition}:billingconductor::${Account}:pricingplan/.*",
      "arn:${Partition}:billingconductor::${Account}:pricingrule/.*"
    ],
    "billingconductor:updatebillinggroup": [
      "arn:${Partition}:billingconductor::${Account}:billinggroup/.*"
    ],
    "billingconductor:updatecustomlineitem": [
      "arn:${Partition}:billingconductor::${Account}:customlineitem/.*"
    ],
    "billingconductor:updatepricingplan": [
      "arn:${Partition}:billingconductor::${Account}:pricingplan/.*"
    ],
    "billingconductor:updatepricingrule": [
      "arn:${Partition}:billingconductor::${Account}:pricingrule/.*"
    ],
    "braket:canceljob": [
      "arn:${Partition}:braket:${Region}:${Account}:job/.*"
    ],
    "braket:cancelquantumtask": [
      "arn:${Partition}:braket:${Region}:${Account}:quantum-task/.*"
    ],
    "braket:createjob": [
      "arn:${Partition}:braket:*:*:device/.*",
      "arn:${Partition}:braket:${Region}:${Account}:job/.*"
    ],
    "braket:createquantumtask": [
      "arn:${Partition}:braket:*:*:device/.*",
      "arn:${Partition}:braket:${Region}:${Account}:quantum-task/.*"
    ],
    "braket:createspendinglimit": [
      "arn:${Partition}:braket:*:*:device/.*",
      "arn:${Partition}:braket:${Region}:${Account}:spending-limit/.*"
    ],
    "braket:deletespendinglimit": [
      "arn:${Partition}:braket:${Region}:${Account}:spending-limit/.*"
    ],
    "braket:getdevice": [
      "arn:${Partition}:braket:*:*:device/.*"
    ],
    "braket:getjob": [
      "arn:${Partition}:braket:${Region}:${Account}:job/.*"
    ],
    "braket:getquantumtask": [
      "arn:${Partition}:braket:${Region}:${Account}:quantum-task/.*"
    ],
    "braket:listtagsforresource": [
      "arn:${Partition}:braket:${Region}:${Account}:job/.*",
      "arn:${Partition}:braket:${Region}:${Account}:quantum-task/.*",
      "arn:${Partition}:braket:${Region}:${Account}:spending-limit/.*"
    ],
    "braket:tagresource": [
      "arn:${Partition}:braket:${Region}:${Account}:job/.*",
      "arn:${Partition}:braket:${Region}:${Account}:quantum-task/.*",
      "arn:${Partition}:braket:${Region}:${Account}:spending-limit/.*"
    ],
    "braket:untagresource": [
      "arn:${Partition}:braket:${Region}:${Account}:job/.*",
      "arn:${Partition}:braket:${Region}:${Account}:quantum-task/.*",
      "arn:${Partition}:braket:${Region}:${Account}:spending-limit/.*"
    ],
    "braket:updatespendinglimit": [
      "arn:${Partition}:braket:${Region}:${Account}:spending-limit/.*"
    ],
    "budgets:createbudgetaction": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:deletebudgetaction": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:describebudgetaction": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:describebudgetactionhistories": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:describebudgetactionsforbudget": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:executebudgetaction": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:listtagsforresource": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:modifybudget": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:tagresource": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:untagresource": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:updatebudgetaction": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "budgets:viewbudget": [
      "arn:${Partition}:budgets::${Account}:budget/.*"
    ],
    "bugbust:evaluateprofilinggroups": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:getevent": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:getjoineventstatus": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:joinevent": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:listbugs": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:listeventparticipants": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:listeventscores": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:listprofilinggroups": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:listpullrequests": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:listtagsforresource": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:tagresource": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:untagresource": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:updateevent": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:updateworkitem": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "bugbust:updateworkitemadmin": [
      "arn:${Partition}:bugbust:${Region}:${Account}:events/.*"
    ],
    "cases:batchgetcaserule": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:batchgetfield": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:batchputfieldoptions": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:createcase": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:createcaserule": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:createfield": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:createlayout": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:createrelateditem": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:createtemplate": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:deletecase": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:deletecaserule": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:deletedomain": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:deletefield": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:deletelayout": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:deleterelateditem": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:deletetemplate": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:getcase": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:getcaseauditevents": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:getcaseeventconfiguration": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:getdomain": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:getlayout": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:gettemplate": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:listcaserules": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:listcasesforcontact": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:listfieldoptions": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:listfields": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:listlayouts": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:listtemplates": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:putcaseeventconfiguration": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:searchallrelateditems": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:searchcases": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:searchrelateditems": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:tagresource": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:untagresource": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:updatecase": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:updatecaserule": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:updatefield": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:updatelayout": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:updaterelateditem": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cases:updatetemplate": [
      "arn:${Partition}:cases:${Region}:${Account}:domain/.*"
    ],
    "cassandra:alter": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:altermultiregionresource": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:create": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:createmultiregionresource": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:drop": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:dropmultiregionresource": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:getrecords": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:getsharditerator": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:getstream": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:modify": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:modifymultiregionresource": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:restore": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:restoremultiregiontable": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:select": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:selectmultiregionresource": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:tagmultiregionresource": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:tagresource": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:untagmultiregionresource": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:untagresource": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "cassandra:updatepartitioner": [
      "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/.*"
    ],
    "ce:deleteanomalymonitor": [
      "arn:${Partition}:ce::${Account}:anomalymonitor/.*"
    ],
    "ce:deleteanomalysubscription": [
      "arn:${Partition}:ce::${Account}:anomalysubscription/.*"
    ],
    "ce:deletecostcategorydefinition": [
      "arn:${Partition}:ce::${Account}:costcategory/.*"
    ],
    "ce:describecostcategorydefinition": [
      "arn:${Partition}:ce::${Account}:costcategory/.*"
    ],
    "ce:getanomalies": [
      "arn:${Partition}:ce::${Account}:anomalymonitor/.*"
    ],
    "ce:getanomalymonitors": [
      "arn:${Partition}:ce::${Account}:anomalymonitor/.*"
    ],
    "ce:getanomalysubscriptions": [
      "arn:${Partition}:ce::${Account}:anomalysubscription/.*"
    ],
    "ce:getcostandusage": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "ce:getcostandusagecomparisons": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "ce:getcostandusagewithresources": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "ce:getcostcategories": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "ce:getcostcomparisondrivers": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "ce:getcostforecast": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "ce:getdimensionvalues": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "ce:gettags": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "ce:getusageforecast": [
      "arn:${Partition}:billing::${Account}:billingview/.*"
    ],
    "ce:listtagsforresource": [
      "arn:${Partition}:ce::${Account}:anomalymonitor/.*",
      "arn:${Partition}:ce::${Account}:anomalysubscription/.*",
      "arn:${Partition}:ce::${Account}:costcategory/.*"
    ],
    "ce:tagresource": [
      "arn:${Partition}:ce::${Account}:anomalymonitor/.*",
      "arn:${Partition}:ce::${Account}:anomalysubscription/.*",
      "arn:${Partition}:ce::${Account}:costcategory/.*"
    ],
    "ce:untagresource": [
      "arn:${Partition}:ce::${Account}:anomalymonitor/.*",
      "arn:${Partition}:ce::${Account}:anomalysubscription/.*",
      "arn:${Partition}:ce::${Account}:costcategory/.*"
    ],
    "ce:updateanomalymonitor": [
      "arn:${Partition}:ce::${Account}:anomalymonitor/.*"
    ],
    "ce:updateanomalysubscription": [
      "arn:${Partition}:ce::${Account}:anomalysubscription/.*"
    ],
    "ce:updatecostcategorydefinition": [
      "arn:${Partition}:ce::${Account}:costcategory/.*"
    ],
    "chatbot:associatetoconfiguration": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*",
      "arn:${Partition}:chatbot::${Account}:custom-action/.*"
    ],
    "chatbot:deletechimewebhookconfiguration": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*"
    ],
    "chatbot:deletecustomaction": [
      "arn:${Partition}:chatbot::${Account}:custom-action/.*"
    ],
    "chatbot:deletemicrosoftteamschannelconfiguration": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*"
    ],
    "chatbot:deleteslackchannelconfiguration": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*"
    ],
    "chatbot:disassociatefromconfiguration": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*",
      "arn:${Partition}:chatbot::${Account}:custom-action/.*"
    ],
    "chatbot:getcustomaction": [
      "arn:${Partition}:chatbot::${Account}:custom-action/.*"
    ],
    "chatbot:listassociations": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*"
    ],
    "chatbot:tagresource": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*",
      "arn:${Partition}:chatbot::${Account}:custom-action/.*"
    ],
    "chatbot:untagresource": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*",
      "arn:${Partition}:chatbot::${Account}:custom-action/.*"
    ],
    "chatbot:updatechimewebhookconfiguration": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*"
    ],
    "chatbot:updatecustomaction": [
      "arn:${Partition}:chatbot::${Account}:custom-action/.*"
    ],
    "chatbot:updatemicrosoftteamschannelconfiguration": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*"
    ],
    "chatbot:updateslackchannelconfiguration": [
      "arn:${Partition}:chatbot::${Account}:chat-configuration/.*"
    ],
    "chime:associatechannelflow": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:associatephonenumberswithvoiceconnector": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:batchcreateattendee": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:batchcreatechannelmembership": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:batchupdateattendeecapabilitiesexcept": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:channelflowcallback": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:connect": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:createappinstanceadmin": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:createattendee": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:createchannel": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:createchannelban": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:createchannelflow": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:createchannelmembership": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:createchannelmoderator": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:createmediainsightspipeline": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/.*"
    ],
    "chime:createmediastreampipeline": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline-kinesis-video-stream-pool/.*"
    ],
    "chime:createmeetingdialout": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:createproxysession": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:createsipmediaapplicationcall": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:createsiprule": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:createvoiceconnectorgroup": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deleteappinstance": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deleteappinstanceadmin": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deleteappinstancebot": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deleteappinstancestreamingconfigurations": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deleteappinstanceuser": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deleteattendee": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:deletechannel": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deletechannelban": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deletechannelflow": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deletechannelmembership": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deletechannelmessage": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deletechannelmoderator": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deletemediacapturepipeline": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*"
    ],
    "chime:deletemediainsightspipelineconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/.*"
    ],
    "chime:deletemediapipeline": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*"
    ],
    "chime:deletemediapipelinekinesisvideostreampool": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline-kinesis-video-stream-pool/.*"
    ],
    "chime:deletemeeting": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:deletemessagingstreamingconfigurations": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:deleteproxysession": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deletesipmediaapplication": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:deletevoiceconnector": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deletevoiceconnectoremergencycallingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deletevoiceconnectorexternalsystemsconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deletevoiceconnectororigination": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deletevoiceconnectorproxy": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deletevoiceconnectorstreamingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deletevoiceconnectortermination": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deletevoiceconnectorterminationcredentials": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:deletevoiceprofile": [
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile/.*"
    ],
    "chime:deletevoiceprofiledomain": [
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile-domain/.*"
    ],
    "chime:deregisterappinstanceuserendpoint": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describeappinstance": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describeappinstanceadmin": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describeappinstancebot": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describeappinstanceuser": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describeappinstanceuserendpoint": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describechannel": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describechannelban": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describechannelflow": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describechannelmembership": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describechannelmembershipforappinstanceuser": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describechannelmoderatedbyappinstanceuser": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:describechannelmoderator": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:disassociatechannelflow": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:disassociatephonenumbersfromvoiceconnector": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getappinstanceretentionsettings": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:getappinstancestreamingconfigurations": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:getattendee": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:getchannelmembershippreferences": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:getchannelmessage": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:getchannelmessagestatus": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:getmediacapturepipeline": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*"
    ],
    "chime:getmediainsightspipelineconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/.*"
    ],
    "chime:getmediapipeline": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*"
    ],
    "chime:getmediapipelinekinesisvideostreampool": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline-kinesis-video-stream-pool/.*"
    ],
    "chime:getmeeting": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:getmessagingstreamingconfigurations": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:getproxysession": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getsipmediaapplication": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:getsipmediaapplicationalexaskillconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:getsipmediaapplicationloggingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:getspeakersearchtask": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceconnector": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceconnectoremergencycallingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceconnectorexternalsystemsconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceconnectorloggingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceconnectororigination": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceconnectorproxy": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceconnectorstreamingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceconnectortermination": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceconnectorterminationhealth": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:getvoiceprofile": [
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile/.*"
    ],
    "chime:getvoiceprofiledomain": [
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile-domain/.*"
    ],
    "chime:getvoicetoneanalysistask": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:listappinstanceadmins": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listappinstancebots": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listappinstances": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listappinstanceuserendpoints": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listappinstanceusers": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listattendees": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:listattendeetags": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:listchannelbans": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listchannelflows": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listchannelmemberships": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listchannelmembershipsforappinstanceuser": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listchannelmessages": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listchannelmoderators": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listchannels": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listchannelsassociatedwithchannelflow": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listchannelsmoderatedbyappinstanceuser": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listmeetingtags": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:listproxysessions": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:listsiprules": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:listsubchannels": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:listtagsforresource": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline-kinesis-video-stream-pool/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile-domain/.*"
    ],
    "chime:listvoiceconnectorterminationcredentials": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:listvoiceprofiles": [
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile-domain/.*"
    ],
    "chime:putappinstanceretentionsettings": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:putappinstancestreamingconfigurations": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:putappinstanceuserexpirationsettings": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:putchannelexpirationsettings": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:putchannelmembershippreferences": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:putmessagingstreamingconfigurations": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:putsipmediaapplicationalexaskillconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:putsipmediaapplicationloggingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:putvoiceconnectoremergencycallingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:putvoiceconnectorexternalsystemsconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:putvoiceconnectorloggingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:putvoiceconnectororigination": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:putvoiceconnectorproxy": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:putvoiceconnectorstreamingconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:putvoiceconnectortermination": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:putvoiceconnectorterminationcredentials": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:redactchannelmessage": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:registerappinstanceuserendpoint": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:searchchannels": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:sendchannelmessage": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:startspeakersearchtask": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:startvoicetoneanalysistask": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:stopspeakersearchtask": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:stopvoicetoneanalysistask": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:tagattendee": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:tagmeeting": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:tagresource": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline-kinesis-video-stream-pool/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile-domain/.*"
    ],
    "chime:untagattendee": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:untagmeeting": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:untagresource": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline-kinesis-video-stream-pool/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*",
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile-domain/.*"
    ],
    "chime:updateappinstance": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:updateappinstancebot": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:updateappinstanceuser": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:updateappinstanceuserendpoint": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:updateattendeecapabilities": [
      "arn:${Partition}:chime:${Region}:${AccountId}:meeting/.*"
    ],
    "chime:updatechannel": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:updatechannelflow": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:updatechannelmessage": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:updatechannelreadmarker": [
      "arn:${Partition}:chime:${Region}:${AccountId}:app-instance/.*"
    ],
    "chime:updatemediainsightspipelineconfiguration": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-insights-pipeline-configuration/.*"
    ],
    "chime:updatemediainsightspipelinestatus": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline/.*"
    ],
    "chime:updatemediapipelinekinesisvideostreampool": [
      "arn:${Partition}:chime:${Region}:${AccountId}:media-pipeline-kinesis-video-stream-pool/.*"
    ],
    "chime:updateproxysession": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:updatesipmediaapplication": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:updatesipmediaapplicationcall": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:updatesiprule": [
      "arn:${Partition}:chime:${Region}:${AccountId}:sma/.*"
    ],
    "chime:updatevoiceconnector": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:updatevoiceconnectorgroup": [
      "arn:${Partition}:chime:${Region}:${AccountId}:vc/.*"
    ],
    "chime:updatevoiceprofile": [
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile/.*"
    ],
    "chime:updatevoiceprofiledomain": [
      "arn:${Partition}:chime:${Region}:${AccountId}:voice-profile-domain/.*"
    ],
    "cleanrooms-ml:canceltrainedmodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:canceltrainedmodelinferencejob": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:createaudiencemodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:training-dataset/.*"
    ],
    "cleanrooms-ml:createconfiguredaudiencemodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-model/.*"
    ],
    "cleanrooms-ml:createconfiguredmodelalgorithmassociation": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-model-algorithm/.*"
    ],
    "cleanrooms-ml:createmlinputchannel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:createtrainedmodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:deleteaudiencegenerationjob": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-generation-job/.*"
    ],
    "cleanrooms-ml:deleteaudiencemodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-model/.*"
    ],
    "cleanrooms-ml:deleteconfiguredaudiencemodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*"
    ],
    "cleanrooms-ml:deleteconfiguredaudiencemodelpolicy": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*"
    ],
    "cleanrooms-ml:deleteconfiguredmodelalgorithm": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-model-algorithm/.*"
    ],
    "cleanrooms-ml:deleteconfiguredmodelalgorithmassociation": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:deletemlinputchanneldata": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:deletetrainedmodeloutput": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:deletetrainingdataset": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:training-dataset/.*"
    ],
    "cleanrooms-ml:getaudiencegenerationjob": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-generation-job/.*"
    ],
    "cleanrooms-ml:getaudiencemodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-model/.*"
    ],
    "cleanrooms-ml:getcollaborationconfiguredmodelalgorithmassociation": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:getcollaborationmlinputchannel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:getcollaborationtrainedmodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:getconfiguredaudiencemodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*"
    ],
    "cleanrooms-ml:getconfiguredaudiencemodelpolicy": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*"
    ],
    "cleanrooms-ml:getconfiguredmodelalgorithm": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-model-algorithm/.*"
    ],
    "cleanrooms-ml:getconfiguredmodelalgorithmassociation": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:getmlinputchannel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:gettrainedmodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:gettrainedmodelinferencejob": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:gettrainingdataset": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:training-dataset/.*"
    ],
    "cleanrooms-ml:listaudienceexportjobs": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-generation-job/.*"
    ],
    "cleanrooms-ml:listaudiencegenerationjobs": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*"
    ],
    "cleanrooms-ml:listcollaborationtrainedmodelexportjobs": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:listtagsforresource": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-generation-job/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-model/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:training-dataset/.*"
    ],
    "cleanrooms-ml:putconfiguredaudiencemodelpolicy": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*"
    ],
    "cleanrooms-ml:startaudienceexportjob": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-generation-job/.*"
    ],
    "cleanrooms-ml:startaudiencegenerationjob": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*"
    ],
    "cleanrooms-ml:starttrainedmodelexportjob": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:starttrainedmodelinferencejob": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms-ml:tagresource": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-model-algorithm/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-generation-job/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-model/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:training-dataset/.*"
    ],
    "cleanrooms-ml:untagresource": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-model-algorithm/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-generation-job/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-model/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:training-dataset/.*"
    ],
    "cleanrooms-ml:updateconfiguredaudiencemodel": [
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-model/.*",
      "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/.*"
    ],
    "cleanrooms:batchgetcollaborationanalysistemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:batchgetschema": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:batchgetschemaanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createanalysistemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createcollaboration": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:createcollaborationchangerequest": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:createconfiguredaudiencemodelassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createconfiguredtable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:createconfiguredtableanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:createconfiguredtableassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createconfiguredtableassociationanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createidmappingtable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createidnamespaceassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createintermediatetable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createintermediatetableanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createmembership": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:createprivacybudgettemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deleteanalysistemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deletecollaboration": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:deleteconfiguredaudiencemodelassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deleteconfiguredtable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:deleteconfiguredtableanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:deleteconfiguredtableassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deleteconfiguredtableassociationanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deleteidmappingtable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deleteidnamespaceassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deleteintermediatetable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deleteintermediatetableanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deletemember": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:deletemembership": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:deleteprivacybudgettemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:disallowintermediatetable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getanalysislogexport": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getanalysistemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getcollaboration": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:getcollaborationanalysistemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:getcollaborationchangerequest": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:getcollaborationconfiguredaudiencemodelassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getcollaborationidnamespaceassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getcollaborationprivacybudgettemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getconfiguredaudiencemodelassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getconfiguredtable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:getconfiguredtableanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:getconfiguredtableassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getconfiguredtableassociationanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getidmappingtable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getidnamespaceassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getintermediatetable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getintermediatetableanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getmembership": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getprivacybudgettemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getprotectedjob": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getprotectedquery": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getschema": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:getschemaanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listanalysislogexports": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listanalysistemplates": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listcollaborationanalysistemplates": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:listcollaborationchangerequests": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:listcollaborationconfiguredaudiencemodelassociations": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:listcollaborationidnamespaceassociations": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:listcollaborationprivacybudgets": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:listcollaborationprivacybudgettemplates": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:listconfiguredaudiencemodelassociations": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listconfiguredtableassociations": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listidmappingtables": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listidnamespaceassociations": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listintermediatetables": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listintermediatetableversions": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listmembers": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:listprivacybudgets": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listprivacybudgettemplates": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listprotectedjobs": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listprotectedqueries": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:listschemas": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:listtagsforresource": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:passcollaboration": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:passmembership": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:populateidmappingtable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:populateintermediatetable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:previewprivacyimpact": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:startanalysislogexport": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:startprotectedjob": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:startprotectedquery": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:tagresource": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:untagresource": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*",
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:updateanalysistemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updatecollaboration": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:updatecollaborationchangerequest": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:collaboration/.*"
    ],
    "cleanrooms:updateconfiguredaudiencemodelassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updateconfiguredtable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:updateconfiguredtableallowedcolumns": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:updateconfiguredtableanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:updateconfiguredtableassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updateconfiguredtableassociationanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updateconfiguredtablereference": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:configuredtable/.*"
    ],
    "cleanrooms:updateidmappingtable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updateidnamespaceassociation": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updateintermediatetable": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updateintermediatetableanalysisrule": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updatemembership": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updateprivacybudgettemplate": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updateprotectedjob": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cleanrooms:updateprotectedquery": [
      "arn:${Partition}:cleanrooms:${Region}:${Account}:membership/.*"
    ],
    "cloud9:activateec2remote": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:createenvironmentmembership": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:createenvironmenttoken": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:deleteenvironment": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:deleteenvironmentmembership": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:describeec2remote": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:describeenvironmentmemberships": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:describeenvironments": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:describeenvironmentstatus": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:describesshremote": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:getenvironmentconfig": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:getenvironmentsettings": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:getmembershipsettings": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:listtagsforresource": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:modifytemporarycredentialsonenvironmentec2": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:tagresource": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:untagresource": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:updateenvironment": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:updateenvironmentmembership": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:updateenvironmentsettings": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:updatemembershipsettings": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "cloud9:updatesshremote": [
      "arn:${Partition}:cloud9:${Region}:${Account}:environment:.*"
    ],
    "clouddirectory:addfacettoobject": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:applyschema": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:attachobject": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:attachpolicy": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:attachtoindex": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:attachtypedlink": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:batchread": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:batchwrite": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:createdirectory": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:createfacet": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*"
    ],
    "clouddirectory:createindex": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:createobject": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:createtypedlinkfacet": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*"
    ],
    "clouddirectory:deletedirectory": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:deletefacet": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*"
    ],
    "clouddirectory:deleteobject": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:deleteschema": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:deletetypedlinkfacet": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*"
    ],
    "clouddirectory:detachfromindex": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:detachobject": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:detachpolicy": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:detachtypedlink": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:disabledirectory": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:enabledirectory": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:getappliedschemaversion": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:getdirectory": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:getfacet": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:getlinkattributes": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:getobjectattributes": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:getobjectinformation": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:getschemaasjson": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:gettypedlinkfacetinformation": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:listappliedschemaarns": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listattachedindices": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listfacetattributes": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:listfacetnames": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:listincomingtypedlinks": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listindex": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listobjectattributes": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listobjectchildren": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listobjectparentpaths": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listobjectparents": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listobjectpolicies": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listoutgoingtypedlinks": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listpolicyattachments": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listtagsforresource": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:listtypedlinkfacetattributes": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:listtypedlinkfacetnames": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:lookuppolicy": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:publishschema": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*"
    ],
    "clouddirectory:removefacetfromobject": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:tagresource": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:untagresource": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:updatefacet": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*"
    ],
    "clouddirectory:updatelinkattributes": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:updateobjectattributes": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*"
    ],
    "clouddirectory:updateschema": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*"
    ],
    "clouddirectory:updatetypedlinkfacet": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*"
    ],
    "clouddirectory:upgradeappliedschema": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:directory/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "clouddirectory:upgradepublishedschema": [
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/development/.*",
      "arn:${Partition}:clouddirectory:${Region}:${Account}:schema/published/.*"
    ],
    "cloudformation:cancelupdatestack": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:continueupdaterollback": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:createchangeset": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:createstack": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:createstackinstances": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:stackset-target/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:type/resource/.*"
    ],
    "cloudformation:createstackrefactor": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:deletechangeset": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:deletestack": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:deletestackinstances": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:stackset-target/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:type/resource/.*"
    ],
    "cloudformation:deletestackset": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:describechangeset": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:describechangesethooks": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:describeevents": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:changeSet/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:describestackevents": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:describestackinstance": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:describestackrefactor": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:describestackresource": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:describestackresourcedrifts": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:describestackresources": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:describestacks": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:describestackset": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:describestacksetoperation": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:detectstackdrift": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:detectstackresourcedrift": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:detectstacksetdrift": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:executechangeset": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:executestackrefactor": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:getstackpolicy": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:gettemplate": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:gettemplatesummary": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:importstackstostackset": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:listchangesets": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:listhookresults": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:liststackinstanceresourcedrifts": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:liststackinstances": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:liststackrefactoractions": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:liststackrefactors": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:liststackresources": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:liststacksetautodeploymenttargets": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:liststacksetoperationresults": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:liststacksetoperations": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:recordhandlerprogress": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:rollbackstack": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:setstackpolicy": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:signalresource": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:stopstacksetoperation": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:tagresource": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:changeSet/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:untagresource": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:changeSet/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*"
    ],
    "cloudformation:updatestack": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudformation:updatestackinstances": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:stackset-target/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:type/resource/.*"
    ],
    "cloudformation:updatestackset": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:stackset-target/.*",
      "arn:${Partition}:cloudformation:${Region}:${Account}:type/resource/.*"
    ],
    "cloudformation:updateterminationprotection": [
      "arn:${Partition}:cloudformation:${Region}:${Account}:stack/.*"
    ],
    "cloudfront-keyvaluestore:deletekey": [
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*"
    ],
    "cloudfront-keyvaluestore:describekeyvaluestore": [
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*"
    ],
    "cloudfront-keyvaluestore:getkey": [
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*"
    ],
    "cloudfront-keyvaluestore:listkeys": [
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*"
    ],
    "cloudfront-keyvaluestore:putkey": [
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*"
    ],
    "cloudfront-keyvaluestore:updatekeys": [
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*"
    ],
    "cloudfront:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:associatealias": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:associatedistributiontenantwebacl": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:associatedistributionwebacl": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:copydistribution": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:createinvalidation": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:createinvalidationfordistributiontenant": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:deleteanycastiplist": [
      "arn:${Partition}:cloudfront::${Account}:anycast-ip-list/.*"
    ],
    "cloudfront:deletecachepolicy": [
      "arn:${Partition}:cloudfront::${Account}:cache-policy/.*"
    ],
    "cloudfront:deletecloudfrontoriginaccessidentity": [
      "arn:${Partition}:cloudfront::${Account}:origin-access-identity/.*"
    ],
    "cloudfront:deleteconnectionfunction": [
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*"
    ],
    "cloudfront:deleteconnectiongroup": [
      "arn:${Partition}:cloudfront::${Account}:connection-group/.*"
    ],
    "cloudfront:deletecontinuousdeploymentpolicy": [
      "arn:${Partition}:cloudfront::${Account}:continuous-deployment-policy/.*"
    ],
    "cloudfront:deletedistribution": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:deletedistributiontenant": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:deletefieldlevelencryptionconfig": [
      "arn:${Partition}:cloudfront::${Account}:field-level-encryption-config/.*"
    ],
    "cloudfront:deletefieldlevelencryptionprofile": [
      "arn:${Partition}:cloudfront::${Account}:field-level-encryption-profile/.*"
    ],
    "cloudfront:deletefunction": [
      "arn:${Partition}:cloudfront::${Account}:function/.*"
    ],
    "cloudfront:deletekeyvaluestore": [
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*"
    ],
    "cloudfront:deleteoriginaccesscontrol": [
      "arn:${Partition}:cloudfront::${Account}:origin-access-control/.*"
    ],
    "cloudfront:deleteoriginrequestpolicy": [
      "arn:${Partition}:cloudfront::${Account}:origin-request-policy/.*"
    ],
    "cloudfront:deleterealtimelogconfig": [
      "arn:${Partition}:cloudfront::${Account}:realtime-log-config/.*"
    ],
    "cloudfront:deleteresourcepolicy": [
      "arn:${Partition}:cloudfront::${Account}:vpcorigin/.*"
    ],
    "cloudfront:deleteresponseheaderspolicy": [
      "arn:${Partition}:cloudfront::${Account}:response-headers-policy/.*"
    ],
    "cloudfront:deletestreamingdistribution": [
      "arn:${Partition}:cloudfront::${Account}:streaming-distribution/.*"
    ],
    "cloudfront:deletetruststore": [
      "arn:${Partition}:cloudfront::${Account}:trust-store/.*"
    ],
    "cloudfront:deletevpcorigin": [
      "arn:${Partition}:cloudfront::${Account}:vpcorigin/.*"
    ],
    "cloudfront:describeconnectionfunction": [
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*"
    ],
    "cloudfront:describefunction": [
      "arn:${Partition}:cloudfront::${Account}:function/.*"
    ],
    "cloudfront:describekeyvaluestore": [
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*"
    ],
    "cloudfront:disassociatedistributiontenantwebacl": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:disassociatedistributionwebacl": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:getanycastiplist": [
      "arn:${Partition}:cloudfront::${Account}:anycast-ip-list/.*"
    ],
    "cloudfront:getcachepolicy": [
      "arn:${Partition}:cloudfront::${Account}:cache-policy/.*"
    ],
    "cloudfront:getcachepolicyconfig": [
      "arn:${Partition}:cloudfront::${Account}:cache-policy/.*"
    ],
    "cloudfront:getcloudfrontoriginaccessidentity": [
      "arn:${Partition}:cloudfront::${Account}:origin-access-identity/.*"
    ],
    "cloudfront:getcloudfrontoriginaccessidentityconfig": [
      "arn:${Partition}:cloudfront::${Account}:origin-access-identity/.*"
    ],
    "cloudfront:getconnectionfunction": [
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*"
    ],
    "cloudfront:getconnectiongroup": [
      "arn:${Partition}:cloudfront::${Account}:connection-group/.*"
    ],
    "cloudfront:getconnectiongroupbyroutingendpoint": [
      "arn:${Partition}:cloudfront::${Account}:connection-group/.*"
    ],
    "cloudfront:getcontinuousdeploymentpolicy": [
      "arn:${Partition}:cloudfront::${Account}:continuous-deployment-policy/.*"
    ],
    "cloudfront:getcontinuousdeploymentpolicyconfig": [
      "arn:${Partition}:cloudfront::${Account}:continuous-deployment-policy/.*"
    ],
    "cloudfront:getdistribution": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:getdistributionconfig": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:getdistributiontenant": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:getdistributiontenantbydomain": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:getfieldlevelencryption": [
      "arn:${Partition}:cloudfront::${Account}:field-level-encryption-config/.*"
    ],
    "cloudfront:getfieldlevelencryptionconfig": [
      "arn:${Partition}:cloudfront::${Account}:field-level-encryption-config/.*"
    ],
    "cloudfront:getfieldlevelencryptionprofile": [
      "arn:${Partition}:cloudfront::${Account}:field-level-encryption-profile/.*"
    ],
    "cloudfront:getfieldlevelencryptionprofileconfig": [
      "arn:${Partition}:cloudfront::${Account}:field-level-encryption-profile/.*"
    ],
    "cloudfront:getfunction": [
      "arn:${Partition}:cloudfront::${Account}:function/.*"
    ],
    "cloudfront:getinvalidation": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:getinvalidationfordistributiontenant": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:getmanagedcertificatedetails": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:getoriginaccesscontrol": [
      "arn:${Partition}:cloudfront::${Account}:origin-access-control/.*"
    ],
    "cloudfront:getoriginaccesscontrolconfig": [
      "arn:${Partition}:cloudfront::${Account}:origin-access-control/.*"
    ],
    "cloudfront:getoriginrequestpolicy": [
      "arn:${Partition}:cloudfront::${Account}:origin-request-policy/.*"
    ],
    "cloudfront:getoriginrequestpolicyconfig": [
      "arn:${Partition}:cloudfront::${Account}:origin-request-policy/.*"
    ],
    "cloudfront:getrealtimelogconfig": [
      "arn:${Partition}:cloudfront::${Account}:realtime-log-config/.*"
    ],
    "cloudfront:getresourcepolicy": [
      "arn:${Partition}:cloudfront::${Account}:vpcorigin/.*"
    ],
    "cloudfront:getresponseheaderspolicy": [
      "arn:${Partition}:cloudfront::${Account}:response-headers-policy/.*"
    ],
    "cloudfront:getresponseheaderspolicyconfig": [
      "arn:${Partition}:cloudfront::${Account}:response-headers-policy/.*"
    ],
    "cloudfront:getstreamingdistribution": [
      "arn:${Partition}:cloudfront::${Account}:streaming-distribution/.*"
    ],
    "cloudfront:getstreamingdistributionconfig": [
      "arn:${Partition}:cloudfront::${Account}:streaming-distribution/.*"
    ],
    "cloudfront:gettruststore": [
      "arn:${Partition}:cloudfront::${Account}:trust-store/.*"
    ],
    "cloudfront:getvpcorigin": [
      "arn:${Partition}:cloudfront::${Account}:vpcorigin/.*"
    ],
    "cloudfront:listconflictingaliases": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:listdistributionsbyconnectionfunction": [
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*"
    ],
    "cloudfront:listdistributionsbytruststore": [
      "arn:${Partition}:cloudfront::${Account}:trust-store/.*"
    ],
    "cloudfront:listdomainconflicts": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*",
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:listinvalidations": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:listinvalidationsfordistributiontenant": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:listtagsforresource": [
      "arn:${Partition}:cloudfront::${Account}:anycast-ip-list/.*",
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*",
      "arn:${Partition}:cloudfront::${Account}:connection-group/.*",
      "arn:${Partition}:cloudfront::${Account}:distribution/.*",
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*",
      "arn:${Partition}:cloudfront::${Account}:function/.*",
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*",
      "arn:${Partition}:cloudfront::${Account}:trust-store/.*",
      "arn:${Partition}:cloudfront::${Account}:vpcorigin/.*"
    ],
    "cloudfront:publishconnectionfunction": [
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*"
    ],
    "cloudfront:publishfunction": [
      "arn:${Partition}:cloudfront::${Account}:function/.*"
    ],
    "cloudfront:putresourcepolicy": [
      "arn:${Partition}:cloudfront::${Account}:vpcorigin/.*"
    ],
    "cloudfront:tagresource": [
      "arn:${Partition}:cloudfront::${Account}:anycast-ip-list/.*",
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*",
      "arn:${Partition}:cloudfront::${Account}:connection-group/.*",
      "arn:${Partition}:cloudfront::${Account}:distribution/.*",
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*",
      "arn:${Partition}:cloudfront::${Account}:function/.*",
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*",
      "arn:${Partition}:cloudfront::${Account}:streaming-distribution/.*",
      "arn:${Partition}:cloudfront::${Account}:trust-store/.*",
      "arn:${Partition}:cloudfront::${Account}:vpcorigin/.*"
    ],
    "cloudfront:testconnectionfunction": [
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*"
    ],
    "cloudfront:testfunction": [
      "arn:${Partition}:cloudfront::${Account}:function/.*"
    ],
    "cloudfront:untagresource": [
      "arn:${Partition}:cloudfront::${Account}:anycast-ip-list/.*",
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*",
      "arn:${Partition}:cloudfront::${Account}:connection-group/.*",
      "arn:${Partition}:cloudfront::${Account}:distribution/.*",
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*",
      "arn:${Partition}:cloudfront::${Account}:function/.*",
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*",
      "arn:${Partition}:cloudfront::${Account}:streaming-distribution/.*",
      "arn:${Partition}:cloudfront::${Account}:trust-store/.*",
      "arn:${Partition}:cloudfront::${Account}:vpcorigin/.*"
    ],
    "cloudfront:updateanycastiplist": [
      "arn:${Partition}:cloudfront::${Account}:anycast-ip-list/.*"
    ],
    "cloudfront:updatecachepolicy": [
      "arn:${Partition}:cloudfront::${Account}:cache-policy/.*"
    ],
    "cloudfront:updatecloudfrontoriginaccessidentity": [
      "arn:${Partition}:cloudfront::${Account}:origin-access-identity/.*"
    ],
    "cloudfront:updateconnectionfunction": [
      "arn:${Partition}:cloudfront::${Account}:connection-function/.*"
    ],
    "cloudfront:updateconnectiongroup": [
      "arn:${Partition}:cloudfront::${Account}:connection-group/.*"
    ],
    "cloudfront:updatecontinuousdeploymentpolicy": [
      "arn:${Partition}:cloudfront::${Account}:continuous-deployment-policy/.*"
    ],
    "cloudfront:updatedistribution": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:updatedistributiontenant": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:updatedistributionwithstagingconfig": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*"
    ],
    "cloudfront:updatedomainassociation": [
      "arn:${Partition}:cloudfront::${Account}:distribution/.*",
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudfront:updatefieldlevelencryptionprofile": [
      "arn:${Partition}:cloudfront::${Account}:field-level-encryption-profile/.*"
    ],
    "cloudfront:updatefunction": [
      "arn:${Partition}:cloudfront::${Account}:function/.*"
    ],
    "cloudfront:updatekeyvaluestore": [
      "arn:${Partition}:cloudfront::${Account}:key-value-store/.*"
    ],
    "cloudfront:updateoriginaccesscontrol": [
      "arn:${Partition}:cloudfront::${Account}:origin-access-control/.*"
    ],
    "cloudfront:updateoriginrequestpolicy": [
      "arn:${Partition}:cloudfront::${Account}:origin-request-policy/.*"
    ],
    "cloudfront:updaterealtimelogconfig": [
      "arn:${Partition}:cloudfront::${Account}:realtime-log-config/.*"
    ],
    "cloudfront:updateresponseheaderspolicy": [
      "arn:${Partition}:cloudfront::${Account}:response-headers-policy/.*"
    ],
    "cloudfront:updatestreamingdistribution": [
      "arn:${Partition}:cloudfront::${Account}:streaming-distribution/.*"
    ],
    "cloudfront:updatetruststore": [
      "arn:${Partition}:cloudfront::${Account}:trust-store/.*"
    ],
    "cloudfront:updatevpcorigin": [
      "arn:${Partition}:cloudfront::${Account}:vpcorigin/.*"
    ],
    "cloudfront:verifydnsconfiguration": [
      "arn:${Partition}:cloudfront::${Account}:distribution-tenant/.*"
    ],
    "cloudhsm:copybackuptoregion": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*"
    ],
    "cloudhsm:createcluster": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*"
    ],
    "cloudhsm:createhsm": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:cluster/.*"
    ],
    "cloudhsm:deletebackup": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*"
    ],
    "cloudhsm:deletecluster": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:cluster/.*"
    ],
    "cloudhsm:deleteresourcepolicy": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*"
    ],
    "cloudhsm:getresourcepolicy": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*"
    ],
    "cloudhsm:initializecluster": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:cluster/.*"
    ],
    "cloudhsm:listtags": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*",
      "arn:${Partition}:cloudhsm:${Region}:${Account}:cluster/.*"
    ],
    "cloudhsm:modifybackupattributes": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*"
    ],
    "cloudhsm:modifycluster": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:cluster/.*"
    ],
    "cloudhsm:putresourcepolicy": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*"
    ],
    "cloudhsm:restorebackup": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*"
    ],
    "cloudhsm:tagresource": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*",
      "arn:${Partition}:cloudhsm:${Region}:${Account}:cluster/.*"
    ],
    "cloudhsm:untagresource": [
      "arn:${Partition}:cloudhsm:${Region}:${Account}:backup/.*",
      "arn:${Partition}:cloudhsm:${Region}:${Account}:cluster/.*"
    ],
    "cloudsearch:addtags": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:buildsuggesters": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:createdomain": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:defineanalysisscheme": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:defineexpression": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:defineindexfield": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:definesuggester": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:deleteanalysisscheme": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:deletedomain": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:deleteexpression": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:deleteindexfield": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:deletesuggester": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:describeanalysisschemes": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:describeavailabilityoptions": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:describedomainendpointoptions": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:describedomains": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:describeexpressions": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:describeindexfields": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:describescalingparameters": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:describeserviceaccesspolicies": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:describesuggesters": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:document": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:indexdocuments": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:listdomainnames": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:listtags": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:removetags": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:search": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:suggest": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:updateavailabilityoptions": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:updatedomainendpointoptions": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:updatescalingparameters": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudsearch:updateserviceaccesspolicies": [
      "arn:${Partition}:cloudsearch:${Region}:${Account}:domain/.*"
    ],
    "cloudshell:approvecommand": [
      "arn:${Partition}:cloudshell:${Region}:${Account}:environment/.*"
    ],
    "cloudshell:createsession": [
      "arn:${Partition}:cloudshell:${Region}:${Account}:environment/.*"
    ],
    "cloudshell:deleteenvironment": [
      "arn:${Partition}:cloudshell:${Region}:${Account}:environment/.*"
    ],
    "cloudshell:getenvironmentstatus": [
      "arn:${Partition}:cloudshell:${Region}:${Account}:environment/.*"
    ],
    "cloudshell:getfiledownloadurls": [
      "arn:${Partition}:cloudshell:${Region}:${Account}:environment/.*"
    ],
    "cloudshell:getfileuploadurls": [
      "arn:${Partition}:cloudshell:${Region}:${Account}:environment/.*"
    ],
    "cloudshell:putcredentials": [
      "arn:${Partition}:cloudshell:${Region}:${Account}:environment/.*"
    ],
    "cloudshell:startenvironment": [
      "arn:${Partition}:cloudshell:${Region}:${Account}:environment/.*"
    ],
    "cloudshell:stopenvironment": [
      "arn:${Partition}:cloudshell:${Region}:${Account}:environment/.*"
    ],
    "cloudtrail-data:putauditevents": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*"
    ],
    "cloudtrail:addtags": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:cancelquery": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:createchannel": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:createdashboard": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*"
    ],
    "cloudtrail:createeventdatastore": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:createservicelinkedchannel": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*"
    ],
    "cloudtrail:createtrail": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:deletechannel": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*"
    ],
    "cloudtrail:deletedashboard": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*"
    ],
    "cloudtrail:deleteeventdatastore": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:deleteresourcepolicy": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:deleteservicelinkedchannel": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*"
    ],
    "cloudtrail:deletetrail": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:describequery": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:disablefederation": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:enablefederation": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:generatequery": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:generatequeryresultssummary": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:getchannel": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*"
    ],
    "cloudtrail:getdashboard": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*"
    ],
    "cloudtrail:geteventconfiguration": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:geteventdatastore": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:geteventdatastoredata": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:geteventselectors": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:getinsightselectors": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:getqueryresults": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:getresourcepolicy": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:getservicelinkedchannel": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*"
    ],
    "cloudtrail:gettrail": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:gettrailstatus": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:listinsightsdata": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:listqueries": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:listtags": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:puteventconfiguration": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:puteventselectors": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:putinsightselectors": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:putresourcepolicy": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:removetags": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*",
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:restoreeventdatastore": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:startdashboardrefresh": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*"
    ],
    "cloudtrail:starteventdatastoreingestion": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:startlogging": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:startquery": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:stopeventdatastoreingestion": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:stoplogging": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudtrail:updatechannel": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*"
    ],
    "cloudtrail:updatedashboard": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/.*"
    ],
    "cloudtrail:updateeventdatastore": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:eventdatastore/.*"
    ],
    "cloudtrail:updateservicelinkedchannel": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:channel/.*"
    ],
    "cloudtrail:updatetrail": [
      "arn:${Partition}:cloudtrail:${Region}:${Account}:trail/.*"
    ],
    "cloudwatch:batchgetservicelevelobjectivebudgetreport": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:slo/.*"
    ],
    "cloudwatch:deletealarmmuterule": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm-mute-rule:.*"
    ],
    "cloudwatch:deletealarms": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*"
    ],
    "cloudwatch:deletedashboards": [
      "arn:${Partition}:cloudwatch::${Account}:dashboard/.*"
    ],
    "cloudwatch:deleteinsightrules": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/.*"
    ],
    "cloudwatch:deletemetricstream": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/.*"
    ],
    "cloudwatch:deletepipelinerule": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*"
    ],
    "cloudwatch:deleteservicelevelobjective": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:slo/.*"
    ],
    "cloudwatch:describealarmhistory": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*"
    ],
    "cloudwatch:describealarms": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*"
    ],
    "cloudwatch:disablealarmactions": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*"
    ],
    "cloudwatch:disableinsightrules": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/.*"
    ],
    "cloudwatch:enablealarmactions": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*"
    ],
    "cloudwatch:enableinsightrules": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/.*"
    ],
    "cloudwatch:getalarmmuterule": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm-mute-rule:.*"
    ],
    "cloudwatch:getdashboard": [
      "arn:${Partition}:cloudwatch::${Account}:dashboard/.*"
    ],
    "cloudwatch:getdataset": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*"
    ],
    "cloudwatch:getinsightrulereport": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/.*"
    ],
    "cloudwatch:getmetricdata": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*"
    ],
    "cloudwatch:getmetricstream": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/.*"
    ],
    "cloudwatch:getservice": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:service/.*"
    ],
    "cloudwatch:getservicedata": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:service/.*"
    ],
    "cloudwatch:getservicelevelobjective": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:slo/.*"
    ],
    "cloudwatch:listalarmmuterules": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm-mute-rule:.*"
    ],
    "cloudwatch:listmetrics": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*"
    ],
    "cloudwatch:listtagsforresource": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm-mute-rule:.*",
      "arn:${Partition}:cloudwatch::${Account}:dashboard/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:service/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:slo/.*"
    ],
    "cloudwatch:putalarmmuterule": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm-mute-rule:.*"
    ],
    "cloudwatch:putcompositealarm": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*"
    ],
    "cloudwatch:putdashboard": [
      "arn:${Partition}:cloudwatch::${Account}:dashboard/.*"
    ],
    "cloudwatch:putinsightrule": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/.*"
    ],
    "cloudwatch:putlogalarm": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*"
    ],
    "cloudwatch:putmetricalarm": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*"
    ],
    "cloudwatch:putmetricdata": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*"
    ],
    "cloudwatch:putmetricstream": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/.*"
    ],
    "cloudwatch:putpipelinerule": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*"
    ],
    "cloudwatch:setalarmstate": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*"
    ],
    "cloudwatch:startmetricstreams": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/.*"
    ],
    "cloudwatch:stopmetricstreams": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/.*"
    ],
    "cloudwatch:tagresource": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm-mute-rule:.*",
      "arn:${Partition}:cloudwatch::${Account}:dashboard/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:service/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:slo/.*"
    ],
    "cloudwatch:untagresource": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm:.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:alarm-mute-rule:.*",
      "arn:${Partition}:cloudwatch::${Account}:dashboard/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:metric-stream/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:service/.*",
      "arn:${Partition}:cloudwatch:${Region}:${Account}:slo/.*"
    ],
    "cloudwatch:updateservicelevelobjective": [
      "arn:${Partition}:cloudwatch:${Region}:${Account}:slo/.*"
    ],
    "codeartifact:associateexternalconnection": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:associatewithdownstreamrepository": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:copypackageversions": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*",
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:deletedomain": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*"
    ],
    "codeartifact:deletedomainpermissionspolicy": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*"
    ],
    "codeartifact:deletepackage": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:deletepackagegroup": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*"
    ],
    "codeartifact:deletepackageversions": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:deleterepository": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:deleterepositorypermissionspolicy": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:describedomain": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*"
    ],
    "codeartifact:describepackage": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:describepackagegroup": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*"
    ],
    "codeartifact:describepackageversion": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:describerepository": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:disassociateexternalconnection": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:disposepackageversions": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:getassociatedpackagegroup": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*"
    ],
    "codeartifact:getauthorizationtoken": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*"
    ],
    "codeartifact:getdomainpermissionspolicy": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*"
    ],
    "codeartifact:getpackageversionasset": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:getpackageversionreadme": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:getrepositoryendpoint": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:getrepositorypermissionspolicy": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:listallowedrepositoriesforgroup": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*"
    ],
    "codeartifact:listassociatedpackages": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*"
    ],
    "codeartifact:listpackagegroups": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*"
    ],
    "codeartifact:listpackages": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:listpackageversionassets": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:listpackageversiondependencies": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:listpackageversions": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:listrepositoriesindomain": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*"
    ],
    "codeartifact:listsubpackagegroups": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*"
    ],
    "codeartifact:listtagsforresource": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*",
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*",
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:publishpackageversion": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:putdomainpermissionspolicy": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*"
    ],
    "codeartifact:putpackagemetadata": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:putpackageoriginconfiguration": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:putrepositorypermissionspolicy": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:readfromrepository": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:tagresource": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*",
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*",
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:untagresource": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:domain/.*",
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*",
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codeartifact:updatepackagegroup": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*"
    ],
    "codeartifact:updatepackagegrouporiginconfiguration": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package-group/.*"
    ],
    "codeartifact:updatepackageversionsstatus": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:package/.*"
    ],
    "codeartifact:updaterepository": [
      "arn:${Partition}:codeartifact:${Region}:${Account}:repository/.*"
    ],
    "codebuild:batchdeletebuilds": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:batchgetbuildbatches": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:batchgetbuilds": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:batchgetcommandexecutions": [
      "arn:${Partition}:codebuild:${Region}:${Account}:sandbox/.*"
    ],
    "codebuild:batchgetfleets": [
      "arn:${Partition}:codebuild:${Region}:${Account}:.*"
    ],
    "codebuild:batchgetprojects": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:batchgetreportgroups": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:batchgetreports": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:batchgetsandboxes": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:batchputcodecoverages": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:batchputtestcases": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:createfleet": [
      "arn:${Partition}:codebuild:${Region}:${Account}:.*"
    ],
    "codebuild:createproject": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:createreport": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:createreportgroup": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:createwebhook": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:deletebuildbatch": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:deletefleet": [
      "arn:${Partition}:codebuild:${Region}:${Account}:.*"
    ],
    "codebuild:deleteproject": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:deletereport": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:deletereportgroup": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:deleteresourcepolicy": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*",
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:deletewebhook": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:describecodecoverages": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:describetestcases": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:getreportgrouptrend": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:getresourcepolicy": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*",
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:invalidateprojectcache": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:listbuildbatchesforproject": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:listbuildsforproject": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:listcommandexecutionsforsandbox": [
      "arn:${Partition}:codebuild:${Region}:${Account}:sandbox/.*"
    ],
    "codebuild:listreportsforreportgroup": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:listsandboxesforproject": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:putresourcepolicy": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*",
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:retrybuild": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:retrybuildbatch": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:startbuild": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:startbuildbatch": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:startcommandexecution": [
      "arn:${Partition}:codebuild:${Region}:${Account}:sandbox/.*"
    ],
    "codebuild:startsandbox": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:startsandboxconnection": [
      "arn:${Partition}:codebuild:${Region}:${Account}:sandbox/.*"
    ],
    "codebuild:stopbuild": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:stopbuildbatch": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:stopsandbox": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:updatefleet": [
      "arn:${Partition}:codebuild:${Region}:${Account}:.*"
    ],
    "codebuild:updateproject": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:updateprojectvisibility": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codebuild:updatereport": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:updatereportgroup": [
      "arn:${Partition}:codebuild:${Region}:${Account}:report-group/.*"
    ],
    "codebuild:updatewebhook": [
      "arn:${Partition}:codebuild:${Region}:${Account}:project/.*"
    ],
    "codecatalyst:associateiamroletoconnection": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*"
    ],
    "codecatalyst:associateidentitycenterapplicationtospace": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:associateidentitytoidentitycenterapplication": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:batchassociateidentitiestoidentitycenterapplication": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:batchdisassociateidentitiesfromidentitycenterapplication": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:createspaceadminroleassignment": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:deleteconnection": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*"
    ],
    "codecatalyst:deleteidentitycenterapplication": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:disassociateiamrolefromconnection": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*"
    ],
    "codecatalyst:disassociateidentitycenterapplicationfromspace": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:disassociateidentityfromidentitycenterapplication": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:getbillingauthorization": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*"
    ],
    "codecatalyst:getconnection": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*"
    ],
    "codecatalyst:getidentitycenterapplication": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:listiamrolesforconnection": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*"
    ],
    "codecatalyst:listspacesforidentitycenterapplication": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:listtagsforresource": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*",
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:putbillingauthorization": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*"
    ],
    "codecatalyst:synchronizeidentitycenterapplication": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:tagresource": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*",
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:untagresource": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/connections/.*",
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecatalyst:updateidentitycenterapplication": [
      "arn:${Partition}:codecatalyst:${Region}:${Account}:/identity-center-applications/.*"
    ],
    "codecommit:associateapprovalruletemplatewithrepository": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:batchassociateapprovalruletemplatewithrepositories": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:batchdescribemergeconflicts": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:batchdisassociateapprovalruletemplatefromrepositories": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:batchgetcommits": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:batchgetpullrequests": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:batchgetrepositories": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:canceluploadarchive": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:createbranch": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:createcommit": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:createpullrequest": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:createpullrequestapprovalrule": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:createrepository": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:createunreferencedmergecommit": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:deletebranch": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:deletecommentcontent": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:deletefile": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:deletepullrequestapprovalrule": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:deleterepository": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:describemergeconflicts": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:describepullrequestevents": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:disassociateapprovalruletemplatefromrepository": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:evaluatepullrequestapprovalrules": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getblob": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getblobdifferences": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getbranch": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getcomment": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getcommentreactions": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getcommentsforcomparedcommit": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getcommentsforpullrequest": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getcommit": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getcommithistory": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getcommitsfrommergebase": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getdifferences": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getfile": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getfolder": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getmergecommit": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getmergeconflicts": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getmergeoptions": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getobjectidentifier": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getpullrequest": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getpullrequestapprovalstates": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getpullrequestoverridestate": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getreferences": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getrepository": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getrepositorytriggers": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:gettree": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:getuploadarchivestatus": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:gitpull": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:gitpush": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:listassociatedapprovalruletemplatesforrepository": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:listbranches": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:listfilecommithistory": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:listpullrequests": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:listtagsforresource": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:mergebranchesbyfastforward": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:mergebranchesbysquash": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:mergebranchesbythreeway": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:mergepullrequestbyfastforward": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:mergepullrequestbysquash": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:mergepullrequestbythreeway": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:overridepullrequestapprovalrules": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:postcommentforcomparedcommit": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:postcommentforpullrequest": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:postcommentreply": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:putcommentreaction": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:putfile": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:putrepositorytriggers": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:tagresource": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:testrepositorytriggers": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:untagresource": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updatecomment": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updatedefaultbranch": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updatepullrequestapprovalrulecontent": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updatepullrequestapprovalstate": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updatepullrequestdescription": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updatepullrequeststatus": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updatepullrequesttitle": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updaterepositorydescription": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updaterepositoryencryptionkey": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:updaterepositoryname": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codecommit:uploadarchive": [
      "arn:${Partition}:codecommit:${Region}:${Account}:.*"
    ],
    "codeconnections:createrepositorylink": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*"
    ],
    "codeconnections:createsyncconfiguration": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/.*"
    ],
    "codeconnections:deleteconnection": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*"
    ],
    "codeconnections:deletehost": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:host/.*"
    ],
    "codeconnections:deleterepositorylink": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/.*"
    ],
    "codeconnections:getconnection": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*"
    ],
    "codeconnections:getconnectiontoken": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*"
    ],
    "codeconnections:gethost": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:host/.*"
    ],
    "codeconnections:getrepositorylink": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/.*"
    ],
    "codeconnections:getrepositorysyncstatus": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/.*"
    ],
    "codeconnections:listconnections": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*"
    ],
    "codeconnections:listtagsforresource": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*",
      "arn:${Partition}:codeconnections:${Region}:${Account}:host/.*",
      "arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/.*"
    ],
    "codeconnections:passconnection": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*"
    ],
    "codeconnections:passrepository": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/.*"
    ],
    "codeconnections:tagresource": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*",
      "arn:${Partition}:codeconnections:${Region}:${Account}:host/.*",
      "arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/.*"
    ],
    "codeconnections:untagresource": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*",
      "arn:${Partition}:codeconnections:${Region}:${Account}:host/.*",
      "arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/.*"
    ],
    "codeconnections:updateconnectioninstallation": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*"
    ],
    "codeconnections:updatehost": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:host/.*"
    ],
    "codeconnections:updaterepositorylink": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:repository-link/.*"
    ],
    "codeconnections:useconnection": [
      "arn:${Partition}:codeconnections:${Region}:${Account}:connection/.*"
    ],
    "codedeploy:addtagstoonpremisesinstances": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:instance:.*"
    ],
    "codedeploy:batchgetapplicationrevisions": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:batchgetapplications": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:batchgetdeploymentgroups": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:batchgetdeploymentinstances": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:batchgetdeployments": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:batchgetonpremisesinstances": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:instance:.*"
    ],
    "codedeploy:createapplication": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:createdeployment": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:createdeploymentconfig": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentconfig:.*"
    ],
    "codedeploy:createdeploymentgroup": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:deleteapplication": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:deletedeploymentconfig": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentconfig:.*"
    ],
    "codedeploy:deletedeploymentgroup": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:deregisteronpremisesinstance": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:instance:.*"
    ],
    "codedeploy:getapplication": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:getapplicationrevision": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:getdeployment": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:getdeploymentconfig": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentconfig:.*"
    ],
    "codedeploy:getdeploymentgroup": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:getdeploymentinstance": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:getonpremisesinstance": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:instance:.*"
    ],
    "codedeploy:listapplicationrevisions": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:listdeploymentgroups": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:listdeploymentinstances": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:listdeployments": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:listtagsforresource": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*",
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:registerapplicationrevision": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:registeronpremisesinstance": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:instance:.*"
    ],
    "codedeploy:removetagsfromonpremisesinstances": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:instance:.*"
    ],
    "codedeploy:tagresource": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*",
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:untagresource": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*",
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codedeploy:updateapplication": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:application:.*"
    ],
    "codedeploy:updatedeploymentgroup": [
      "arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:.*"
    ],
    "codeguru-profiler:addnotificationchannels": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:batchgetframemetricdata": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:configureagent": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:deleteprofilinggroup": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:describeprofilinggroup": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:getnotificationconfiguration": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:getpolicy": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:getprofile": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:getrecommendations": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:listfindingsreports": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:listprofiletimes": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:listtagsforresource": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:postagentprofile": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:putpermission": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:removenotificationchannel": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:removepermission": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:submitfeedback": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:tagresource": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:untagresource": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-profiler:updateprofilinggroup": [
      "arn:${Partition}:codeguru-profiler:${Region}:${Account}:profilingGroup/.*"
    ],
    "codeguru-reviewer:createcodereview": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:describecodereview": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:describerecommendationfeedback": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:describerepositoryassociation": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:disassociaterepository": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:listrecommendationfeedback": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:listrecommendations": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:listtagsforresource": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:putrecommendationfeedback": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:tagresource": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-reviewer:untagresource": [
      "arn:${Partition}:codeguru-reviewer:${Region}:${Account}:association:.*"
    ],
    "codeguru-security:batchgetfindings": [
      "arn:${Partition}:codeguru-security:${Region}:${Account}:scans/.*"
    ],
    "codeguru-security:createscan": [
      "arn:${Partition}:codeguru-security:${Region}:${Account}:scans/.*"
    ],
    "codeguru-security:createuploadurl": [
      "arn:${Partition}:codeguru-security:${Region}:${Account}:scans/.*"
    ],
    "codeguru-security:getfindings": [
      "arn:${Partition}:codeguru-security:${Region}:${Account}:scans/.*"
    ],
    "codeguru-security:getscan": [
      "arn:${Partition}:codeguru-security:${Region}:${Account}:scans/.*"
    ],
    "codeguru-security:listtagsforresource": [
      "arn:${Partition}:codeguru-security:${Region}:${Account}:scans/.*"
    ],
    "codeguru-security:tagresource": [
      "arn:${Partition}:codeguru-security:${Region}:${Account}:scans/.*"
    ],
    "codeguru-security:untagresource": [
      "arn:${Partition}:codeguru-security:${Region}:${Account}:scans/.*"
    ],
    "codepipeline:createcustomactiontype": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:actiontype:.*"
    ],
    "codepipeline:createpipeline": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:deletecustomactiontype": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:actiontype:.*"
    ],
    "codepipeline:deletepipeline": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:deletewebhook": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:webhook:.*"
    ],
    "codepipeline:deregisterwebhookwiththirdparty": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:webhook:.*"
    ],
    "codepipeline:disablestagetransition": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:enablestagetransition": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:getpipeline": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:getpipelineexecution": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:getpipelinestate": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:listactionexecutions": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:listdeployactionexecutiontargets": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:listpipelineexecutions": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:listruleexecutions": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:listtagsforresource": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:actiontype:.*",
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*",
      "arn:${Partition}:codepipeline:${Region}:${Account}:webhook:.*"
    ],
    "codepipeline:listwebhooks": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:webhook:.*"
    ],
    "codepipeline:overridestagecondition": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:pollforjobs": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:actiontype:.*"
    ],
    "codepipeline:putactionrevision": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:putapprovalresult": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:putwebhook": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*",
      "arn:${Partition}:codepipeline:${Region}:${Account}:webhook:.*"
    ],
    "codepipeline:registerwebhookwiththirdparty": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:webhook:.*"
    ],
    "codepipeline:retrystageexecution": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:rollbackstage": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:startpipelineexecution": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:stoppipelineexecution": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codepipeline:tagresource": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:actiontype:.*",
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*",
      "arn:${Partition}:codepipeline:${Region}:${Account}:webhook:.*"
    ],
    "codepipeline:untagresource": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:actiontype:.*",
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*",
      "arn:${Partition}:codepipeline:${Region}:${Account}:webhook:.*"
    ],
    "codepipeline:updateactiontype": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:actiontype:.*"
    ],
    "codepipeline:updatepipeline": [
      "arn:${Partition}:codepipeline:${Region}:${Account}:.*"
    ],
    "codestar-connections:createrepositorylink": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*"
    ],
    "codestar-connections:createsyncconfiguration": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/.*"
    ],
    "codestar-connections:deleteconnection": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*"
    ],
    "codestar-connections:deletehost": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:host/.*"
    ],
    "codestar-connections:deleterepositorylink": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/.*"
    ],
    "codestar-connections:getconnection": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*"
    ],
    "codestar-connections:getconnectiontoken": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*"
    ],
    "codestar-connections:gethost": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:host/.*"
    ],
    "codestar-connections:getrepositorylink": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/.*"
    ],
    "codestar-connections:getrepositorysyncstatus": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/.*"
    ],
    "codestar-connections:listconnections": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*"
    ],
    "codestar-connections:listtagsforresource": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*",
      "arn:${Partition}:codestar-connections:${Region}:${Account}:host/.*",
      "arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/.*"
    ],
    "codestar-connections:passconnection": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*"
    ],
    "codestar-connections:passrepository": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/.*"
    ],
    "codestar-connections:tagresource": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*",
      "arn:${Partition}:codestar-connections:${Region}:${Account}:host/.*",
      "arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/.*"
    ],
    "codestar-connections:untagresource": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*",
      "arn:${Partition}:codestar-connections:${Region}:${Account}:host/.*",
      "arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/.*"
    ],
    "codestar-connections:updateconnectioninstallation": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*"
    ],
    "codestar-connections:updatehost": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:host/.*"
    ],
    "codestar-connections:updaterepositorylink": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:repository-link/.*"
    ],
    "codestar-connections:useconnection": [
      "arn:${Partition}:codestar-connections:${Region}:${Account}:connection/.*"
    ],
    "codestar-notifications:createnotificationrule": [
      "arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/.*"
    ],
    "codestar-notifications:deletenotificationrule": [
      "arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/.*"
    ],
    "codestar-notifications:describenotificationrule": [
      "arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/.*"
    ],
    "codestar-notifications:listtagsforresource": [
      "arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/.*"
    ],
    "codestar-notifications:subscribe": [
      "arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/.*"
    ],
    "codestar-notifications:tagresource": [
      "arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/.*"
    ],
    "codestar-notifications:unsubscribe": [
      "arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/.*"
    ],
    "codestar-notifications:untagresource": [
      "arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/.*"
    ],
    "codestar-notifications:updatenotificationrule": [
      "arn:${Partition}:codestar-notifications:${Region}:${Account}:notificationrule/.*"
    ],
    "codestar:associateteammember": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:createuserprofile": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "codestar:deleteextendedaccess": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:deleteproject": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:deleteuserprofile": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "codestar:describeproject": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:disassociateteammember": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:getextendedaccess": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:listresources": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:listtagsforproject": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:listteammembers": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:putextendedaccess": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:tagproject": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:untagproject": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:updateproject": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:updateteammember": [
      "arn:${Partition}:codestar:${Region}:${Account}:project/.*"
    ],
    "codestar:updateuserprofile": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "codewhisperer:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:associatecustomizationpermission": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:createcustomization": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:createprofile": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "codewhisperer:deletecustomization": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:deleteprofile": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "codewhisperer:disassociatecustomizationpermission": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:getcustomization": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:listcustomizationpermissions": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:listcustomizations": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:listcustomizationversions": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:listtagsforresource": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*",
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "codewhisperer:tagresource": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*",
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "codewhisperer:untagresource": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*",
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "codewhisperer:updatecustomization": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:customization/.*"
    ],
    "codewhisperer:updateprofile": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "cognito-identity:deleteidentitypool": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:describeidentitypool": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:getidentitypoolanalytics": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:getidentitypooldailyanalytics": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:getidentitypoolroles": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:getidentityproviderdailyanalytics": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:getopenidtokenfordeveloperidentity": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:getprincipaltagattributemap": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:listidentities": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:listtagsforresource": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:lookupdeveloperidentity": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:mergedeveloperidentities": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:tagresource": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:unlinkdeveloperidentity": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:untagresource": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-identity:updateidentitypool": [
      "arn:${Partition}:cognito-identity:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-idp:addcustomattributes": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adduserpoolclientsecret": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminaddusertogroup": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminconfirmsignup": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admincreateuser": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admindeletesoftwaretoken": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admindeleteuser": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admindeleteuserattributes": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admindisableproviderforuser": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admindisableuser": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminenableuser": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminforgetdevice": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admingetdevice": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admingetuser": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admingetuserauthfactors": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:admininitiateauth": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminlinkproviderforuser": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminlistdevices": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminlistgroupsforuser": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminlistuserauthevents": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminremoveuserfromgroup": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminresetuserpassword": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminrespondtoauthchallenge": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminsetusermfapreference": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminsetuserpassword": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminsetusersettings": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminupdateautheventfeedback": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminupdatedevicestatus": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminupdateuserattributes": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:adminuserglobalsignout": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:associatewebacl": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*",
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "cognito-idp:creategroup": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:createidentityprovider": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:createmanagedloginbranding": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:createresourceserver": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:createterms": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:createuserimportjob": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:createuserpoolclient": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:createuserpooldomain": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:createuserpoolreplica": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deletegroup": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deleteidentityprovider": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deletemanagedloginbranding": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deleteresourceserver": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deleteterms": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deleteuserpool": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deleteuserpoolclient": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deleteuserpoolclientsecret": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deleteuserpooldomain": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:deleteuserpoolreplica": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:describeidentityprovider": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:describemanagedloginbranding": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:describemanagedloginbrandingbyclient": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:describeresourceserver": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:describeriskconfiguration": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:describeterms": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:describeuserimportjob": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:describeuserpool": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:describeuserpoolclient": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:disassociatewebacl": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:getcsvheader": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:getgroup": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:getidentityproviderbyidentifier": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:getlogdeliveryconfiguration": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:getsigningcertificate": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:getuicustomization": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:getuserpoolmfaconfig": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:getwebaclforresource": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listgroups": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listidentityproviders": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listresourceservers": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listresourcesforwebacl": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "cognito-idp:listtagsforresource": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listterms": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listuserimportjobs": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listuserpoolclients": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listuserpoolclientsecrets": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listuserpoolreplicas": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listusers": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:listusersingroup": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:setlogdeliveryconfiguration": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:setriskconfiguration": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:setuicustomization": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:setuserpoolmfaconfig": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:startuserimportjob": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:stopuserimportjob": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:tagresource": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:untagresource": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updateautheventfeedback": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updategroup": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updateidentityprovider": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updatemanagedloginbranding": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updateresourceserver": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updateterms": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updateuserpool": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updateuserpoolclient": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updateuserpooldomain": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-idp:updateuserpoolreplica": [
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*"
    ],
    "cognito-sync:bulkpublish": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:deletedataset": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:describedataset": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:describeidentitypoolusage": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:describeidentityusage": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:getbulkpublishdetails": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:getcognitoevents": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:getidentitypoolconfiguration": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:listdatasets": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:listidentitypoolusage": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:listrecords": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:registerdevice": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:setcognitoevents": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:setdatasetconfiguration": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:setidentitypoolconfiguration": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:subscribetodataset": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:unsubscribefromdataset": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "cognito-sync:updaterecords": [
      "arn:${Partition}:cognito-sync:${Region}:${Account}:identitypool/.*"
    ],
    "comprehend:classifydocument": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/.*"
    ],
    "comprehend:createdataset": [
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:createdocumentclassifier": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*"
    ],
    "comprehend:createendpoint": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:createentityrecognizer": [
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*"
    ],
    "comprehend:createflywheel": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:deletedocumentclassifier": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*"
    ],
    "comprehend:deleteendpoint": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/.*"
    ],
    "comprehend:deleteentityrecognizer": [
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*"
    ],
    "comprehend:deleteflywheel": [
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:deleteresourcepolicy": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*"
    ],
    "comprehend:describedataset": [
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:describedocumentclassificationjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classification-job/.*"
    ],
    "comprehend:describedocumentclassifier": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*"
    ],
    "comprehend:describedominantlanguagedetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:dominant-language-detection-job/.*"
    ],
    "comprehend:describeendpoint": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/.*"
    ],
    "comprehend:describeentitiesdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:entities-detection-job/.*"
    ],
    "comprehend:describeentityrecognizer": [
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*"
    ],
    "comprehend:describeeventsdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:events-detection-job/.*"
    ],
    "comprehend:describeflywheel": [
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:describeflywheeliteration": [
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:describekeyphrasesdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:key-phrases-detection-job/.*"
    ],
    "comprehend:describepiientitiesdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:pii-entities-detection-job/.*"
    ],
    "comprehend:describeresourcepolicy": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*"
    ],
    "comprehend:describesentimentdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:sentiment-detection-job/.*"
    ],
    "comprehend:describetargetedsentimentdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:targeted-sentiment-detection-job/.*"
    ],
    "comprehend:describetopicsdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:topics-detection-job/.*"
    ],
    "comprehend:detectentities": [
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/.*"
    ],
    "comprehend:importmodel": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*"
    ],
    "comprehend:listdatasets": [
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:listflywheeliterationhistory": [
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:listtagsforresource": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classification-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:dominant-language-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entities-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:events-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:key-phrases-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:pii-entities-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:sentiment-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:targeted-sentiment-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:topics-detection-job/.*"
    ],
    "comprehend:putresourcepolicy": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*"
    ],
    "comprehend:startdocumentclassificationjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classification-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:startdominantlanguagedetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:dominant-language-detection-job/.*"
    ],
    "comprehend:startentitiesdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:entities-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:starteventsdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:events-detection-job/.*"
    ],
    "comprehend:startflywheeliteration": [
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:startkeyphrasesdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:key-phrases-detection-job/.*"
    ],
    "comprehend:startpiientitiesdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:pii-entities-detection-job/.*"
    ],
    "comprehend:startsentimentdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:sentiment-detection-job/.*"
    ],
    "comprehend:starttargetedsentimentdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:targeted-sentiment-detection-job/.*"
    ],
    "comprehend:starttopicsdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:topics-detection-job/.*"
    ],
    "comprehend:stopdominantlanguagedetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:dominant-language-detection-job/.*"
    ],
    "comprehend:stopentitiesdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:entities-detection-job/.*"
    ],
    "comprehend:stopeventsdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:events-detection-job/.*"
    ],
    "comprehend:stopkeyphrasesdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:key-phrases-detection-job/.*"
    ],
    "comprehend:stoppiientitiesdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:pii-entities-detection-job/.*"
    ],
    "comprehend:stopsentimentdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:sentiment-detection-job/.*"
    ],
    "comprehend:stoptargetedsentimentdetectionjob": [
      "arn:${Partition}:comprehend:${Region}:${Account}:targeted-sentiment-detection-job/.*"
    ],
    "comprehend:stoptrainingdocumentclassifier": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*"
    ],
    "comprehend:stoptrainingentityrecognizer": [
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*"
    ],
    "comprehend:tagresource": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classification-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:dominant-language-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entities-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:events-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:key-phrases-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:pii-entities-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:sentiment-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:targeted-sentiment-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:topics-detection-job/.*"
    ],
    "comprehend:untagresource": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classification-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:dominant-language-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entities-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:events-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:key-phrases-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:pii-entities-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:sentiment-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:targeted-sentiment-detection-job/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:topics-detection-job/.*"
    ],
    "comprehend:updateendpoint": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "comprehend:updateflywheel": [
      "arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/.*",
      "arn:${Partition}:comprehend:${Region}:${Account}:flywheel/.*"
    ],
    "config:associateresourcetypes": [
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*"
    ],
    "config:batchgetaggregateresourceconfig": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:deleteaggregationauthorization": [
      "arn:${Partition}:config:${Region}:${Account}:aggregation-authorization/.*"
    ],
    "config:deleteconfigrule": [
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*"
    ],
    "config:deleteconfigurationaggregator": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:deleteconfigurationrecorder": [
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*"
    ],
    "config:deleteconformancepack": [
      "arn:${Partition}:config:${Region}:${Account}:conformance-pack/.*"
    ],
    "config:deleteconnector": [
      "arn:${Partition}:config:${Region}:${Account}:connector/.*"
    ],
    "config:deleteevaluationresults": [
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*"
    ],
    "config:deleteorganizationconfigrule": [
      "arn:${Partition}:config:${Region}:${Account}:organization-config-rule/.*"
    ],
    "config:deleteorganizationconformancepack": [
      "arn:${Partition}:config:${Region}:${Account}:organization-conformance-pack/.*"
    ],
    "config:deleteremediationconfiguration": [
      "arn:${Partition}:config:${Region}:${Account}:remediation-configuration/.*"
    ],
    "config:deleteservicelinkedconfigurationrecorder": [
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*"
    ],
    "config:deletestoredquery": [
      "arn:${Partition}:config:${Region}:${Account}:stored-query/.*"
    ],
    "config:describeaggregatecompliancebyconfigrules": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:describeaggregatecompliancebyconformancepacks": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:describeconfigurationaggregatorsourcesstatus": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:describeconfigurationrecorders": [
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*"
    ],
    "config:describeconfigurationrecorderstatus": [
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*"
    ],
    "config:describeconformancepackcompliance": [
      "arn:${Partition}:config:${Region}:${Account}:conformance-pack/.*"
    ],
    "config:describeremediationconfigurations": [
      "arn:${Partition}:config:${Region}:${Account}:remediation-configuration/.*"
    ],
    "config:describeremediationexecutionstatus": [
      "arn:${Partition}:config:${Region}:${Account}:remediation-configuration/.*"
    ],
    "config:disassociateresourcetypes": [
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*"
    ],
    "config:getaggregatecompliancedetailsbyconfigrule": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:getaggregateconfigrulecompliancesummary": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:getaggregateconformancepackcompliancesummary": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:getaggregatediscoveredresourcecounts": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:getaggregateresourceconfig": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:getcompliancedetailsbyconfigrule": [
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*"
    ],
    "config:getconformancepackcompliancedetails": [
      "arn:${Partition}:config:${Region}:${Account}:conformance-pack/.*"
    ],
    "config:getconformancepackcompliancesummary": [
      "arn:${Partition}:config:${Region}:${Account}:conformance-pack/.*"
    ],
    "config:getconnector": [
      "arn:${Partition}:config:${Region}:${Account}:connector/.*"
    ],
    "config:getcustomrulepolicy": [
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*"
    ],
    "config:getorganizationconfigruledetailedstatus": [
      "arn:${Partition}:config:${Region}:${Account}:organization-config-rule/.*"
    ],
    "config:getorganizationconformancepackdetailedstatus": [
      "arn:${Partition}:config:${Region}:${Account}:organization-conformance-pack/.*"
    ],
    "config:getorganizationcustomrulepolicy": [
      "arn:${Partition}:config:${Region}:${Account}:organization-config-rule/.*"
    ],
    "config:getstoredquery": [
      "arn:${Partition}:config:${Region}:${Account}:stored-query/.*"
    ],
    "config:listaggregatediscoveredresources": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:listtagsforresource": [
      "arn:${Partition}:config:${Region}:${Account}:aggregation-authorization/.*",
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*",
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*",
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*",
      "arn:${Partition}:config:${Region}:${Account}:conformance-pack/.*",
      "arn:${Partition}:config:${Region}:${Account}:connector/.*",
      "arn:${Partition}:config:${Region}:${Account}:organization-config-rule/.*",
      "arn:${Partition}:config:${Region}:${Account}:organization-conformance-pack/.*",
      "arn:${Partition}:config:${Region}:${Account}:stored-query/.*"
    ],
    "config:putaggregationauthorization": [
      "arn:${Partition}:config:${Region}:${Account}:aggregation-authorization/.*"
    ],
    "config:putconfigrule": [
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*"
    ],
    "config:putconfigurationaggregator": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:putconfigurationrecorder": [
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*"
    ],
    "config:putconformancepack": [
      "arn:${Partition}:config:${Region}:${Account}:conformance-pack/.*"
    ],
    "config:putconnector": [
      "arn:${Partition}:config:${Region}:${Account}:connector/.*"
    ],
    "config:putexternalevaluation": [
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*"
    ],
    "config:putorganizationconfigrule": [
      "arn:${Partition}:config:${Region}:${Account}:organization-config-rule/.*"
    ],
    "config:putorganizationconformancepack": [
      "arn:${Partition}:config:${Region}:${Account}:organization-conformance-pack/.*"
    ],
    "config:putremediationconfigurations": [
      "arn:${Partition}:config:${Region}:${Account}:remediation-configuration/.*"
    ],
    "config:putstoredquery": [
      "arn:${Partition}:config:${Region}:${Account}:stored-query/.*"
    ],
    "config:putthirdpartyservicelinkedconfigurationrecorder": [
      "arn:${Partition}:config:${Region}:${Account}:connector/.*"
    ],
    "config:selectaggregateresourceconfig": [
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*"
    ],
    "config:startconfigrulesevaluation": [
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*"
    ],
    "config:startconfigurationrecorder": [
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*"
    ],
    "config:stopconfigurationrecorder": [
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*"
    ],
    "config:tagresource": [
      "arn:${Partition}:config:${Region}:${Account}:aggregation-authorization/.*",
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*",
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*",
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*",
      "arn:${Partition}:config:${Region}:${Account}:conformance-pack/.*",
      "arn:${Partition}:config:${Region}:${Account}:connector/.*",
      "arn:${Partition}:config:${Region}:${Account}:organization-config-rule/.*",
      "arn:${Partition}:config:${Region}:${Account}:organization-conformance-pack/.*",
      "arn:${Partition}:config:${Region}:${Account}:stored-query/.*"
    ],
    "config:untagresource": [
      "arn:${Partition}:config:${Region}:${Account}:aggregation-authorization/.*",
      "arn:${Partition}:config:${Region}:${Account}:config-rule/.*",
      "arn:${Partition}:config:${Region}:${Account}:config-aggregator/.*",
      "arn:${Partition}:config:${Region}:${Account}:configuration-recorder/.*",
      "arn:${Partition}:config:${Region}:${Account}:conformance-pack/.*",
      "arn:${Partition}:config:${Region}:${Account}:connector/.*",
      "arn:${Partition}:config:${Region}:${Account}:organization-config-rule/.*",
      "arn:${Partition}:config:${Region}:${Account}:organization-conformance-pack/.*",
      "arn:${Partition}:config:${Region}:${Account}:stored-query/.*"
    ],
    "connect-campaigns:createcampaign": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:deletecampaign": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:deletecampaignchannelsubtypeconfig": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:deletecampaigncommunicationlimits": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:deletecampaigncommunicationtime": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:deletecampaignentrylimits": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:describecampaign": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:getcampaignstate": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:getcampaignstatebatch": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:listtagsforresource": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:pausecampaign": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:putdialrequestbatch": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:putoutboundrequestbatch": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:putprofileoutboundrequestbatch": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:resumecampaign": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:startcampaign": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:stopcampaign": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:tagresource": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:untagresource": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaignchannelsubtypeconfig": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaigncommunicationlimits": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaigncommunicationtime": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaigndialerconfig": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaignentrylimits": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaignflowassociation": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaignname": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaignoutboundcallconfig": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaignschedule": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect-campaigns:updatecampaignsource": [
      "arn:${Partition}:connect-campaigns:${Region}:${Account}:campaign/.*"
    ],
    "connect:activateevaluationform": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:admingetemergencyaccesstoken": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associateanalyticsdataset": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associateapprovedorigin": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatebot": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatecontactwithuser": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatecustomerprofilesdomain": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatedefaultvocabulary": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associateemailaddressalias": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associateflow": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:associateinstancestorageconfig": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatelambdafunction": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatelexbot": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatephonenumbercontactflow": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*"
    ],
    "connect:associatequeueemailaddresses": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatequeuequickconnects": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associateroutingprofilequeues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatesecuritykey": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatesecurityprofiles": [
      "arn:${Partition}:wisdom:${Region}:${Account}:.*",
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associatetrafficdistributiongroupuser": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:associateuserproficiencies": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:associateworkspace": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:batchassociateanalyticsdataset": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:batchcreatedatatablevalue": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:batchdeletedatatablevalue": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:batchdescribedatatablevalue": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:batchdisassociateanalyticsdataset": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:batchgetattachedfilemetadata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:batchgetflowassociation": [
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:batchputcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:batchupdatedatatablevalue": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:claimphonenumber": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:completeattachedfileupload": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createagentstatus": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createattachedfile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createauthenticationprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createcontactflow": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createcontactflowmodule": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createcontactflowmodulealias": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createcontactflowmoduleversion": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createcontactflowversion": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createdatatable": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createdatatableattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createemailaddress": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createevaluationform": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createextractiondefinition": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createhoursofoperation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createhoursofoperationoverride": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createintegrationassociation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createmetric": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createnotification": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createparticipant": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createpersistentcontactassociation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createpredefinedattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createprompt": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createpushnotificationregistration": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createqueue": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*"
    ],
    "connect:createquickconnect": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createroutingprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createrule": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createsecurityprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createtasktemplate": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createtrafficdistributiongroup": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:createusecase": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createuser": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createuserhierarchygroup": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createview": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createviewversion": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createvocabulary": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createworkspace": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:createworkspacepage": [
      "arn:${Partition}:connect:${Region}:aws:view/.*",
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deactivateevaluationform": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteattachedfile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletecontactevaluation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletecontactflow": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletecontactflowmodule": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletecontactflowmodulealias": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletecontactflowmoduleversion": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletecontactflowversion": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletedatatable": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletedatatableattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteemailaddress": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteevaluationform": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteextractiondefinition": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletehoursofoperation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletehoursofoperationoverride": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteinstance": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteintegrationassociation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletemetric": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletenotification": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletepredefinedattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteprompt": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletepushnotificationregistration": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletequeue": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletequickconnect": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteroutingprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleterule": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletesecurityprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletetasktemplate": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deletetrafficdistributiongroup": [
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:deleteusecase": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteuser": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteuserhierarchygroup": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteview": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteviewversion": [
      "arn:${Partition}:connect:${Region}:${Account}:.*"
    ],
    "connect:deletevocabulary": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteworkspace": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteworkspacemedia": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:deleteworkspacepage": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeagentstatus": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeattachedfilesconfiguration": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeauthenticationprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describecontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describecontactevaluation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describecontactflow": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describecontactflowmodule": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describecontactflowmodulealias": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describedatatable": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describedatatableattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeemailaddress": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeevaluationform": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeextractiondefinition": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeforecastingplanningschedulingintegration": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describehoursofoperation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describehoursofoperationoverride": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeinstance": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeinstanceattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeinstancestorageconfig": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describemetric": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:.*"
    ],
    "connect:describenotification": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describephonenumber": [
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*"
    ],
    "connect:describepredefinedattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeprompt": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describequeue": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describequickconnect": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeroutingprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describerule": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describesecurityprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describetrafficdistributiongroup": [
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:describeuser": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeuserhierarchygroup": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeuserhierarchystructure": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeview": [
      "arn:${Partition}:connect:${Region}:aws:view/.*",
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:aws:.*",
      "arn:${Partition}:connect:${Region}:${Account}:.*"
    ],
    "connect:describevocabulary": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:describeworkspace": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociateanalyticsdataset": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociateapprovedorigin": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociatebot": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociatecustomerprofilesdomain": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociateemailaddressalias": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociateflow": [
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:disassociateinstancestorageconfig": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociatelambdafunction": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociatelexbot": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociatephonenumbercontactflow": [
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*"
    ],
    "connect:disassociatequeueemailaddresses": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociatequeuequickconnects": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociateroutingprofilequeues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociatesecuritykey": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociatesecurityprofiles": [
      "arn:${Partition}:wisdom:${Region}:${Account}:.*",
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociatetrafficdistributiongroupuser": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:disassociateuserproficiencies": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:disassociateworkspace": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:dismissusercontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:evaluatedatatablevalues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getattachedfile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getcontactattributes": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getcontactmetrics": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getcrossregionrouting": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getcurrentmetricdata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getcurrentuserdata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:geteffectivehoursofoperations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getevaluationformvalidation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getfederationtoken": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getflowassociation": [
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:getmetricdata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getmetricdatav2": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:getpromptfile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:gettasktemplate": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:gettrafficdistribution": [
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:importphonenumber": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:importworkspacemedia": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listagentstatuses": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listanalyticsdataassociations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listanalyticsdatalakedatasets": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listapprovedorigins": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listassociatedcontacts": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listattachedfilesconfigurations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listauthenticationprofiles": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listbots": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listcontactevaluations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listcontactflowmodulealiases": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listcontactflowmodules": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listcontactflowmoduleversions": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listcontactflows": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listcontactflowversions": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listcontactreferences": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listdatatableattributes": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listdatatableprimaryvalues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listdatatables": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listdatatablevalues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listdefaultvocabularies": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listentitysecurityprofiles": [
      "arn:${Partition}:wisdom:${Region}:${Account}:.*",
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listevaluationformaiversions": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listevaluationforms": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listevaluationformversions": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listextractiondefinitions": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listflowassociations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listhoursofoperationoverrides": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listhoursofoperations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listinstanceattributes": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listinstancestorageconfigs": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listintegrationassociations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listlambdafunctions": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listlexbots": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listmetrics": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listnotifications": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listphonenumbers": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listphonenumbersv2": [
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:listpredefinedattributes": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listprompts": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listqueueemailaddresses": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listqueuequickconnects": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listqueues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listquickconnects": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listrealtimecontactanalysissegments": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listrealtimecontactanalysissegmentsv2": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listroutingprofilemanualassignmentqueues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listroutingprofilequeues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listroutingprofiles": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listrules": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listsecuritykeys": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listsecurityprofileapplications": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listsecurityprofileflowmodules": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listsecurityprofilepermissions": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listsecurityprofiles": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listtagsforresource": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:listtasktemplates": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listtrafficdistributiongroups": [
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:listtrafficdistributiongroupusers": [
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:listusecases": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listuserhierarchygroups": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listusernotifications": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listuserproficiencies": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listusers": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listviews": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listviewversions": [
      "arn:${Partition}:connect:${Region}:aws:view/.*",
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listworkspacemedia": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listworkspacepages": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:listworkspaces": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:monitorcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:pausecontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:putuserstatus": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:releasephonenumber": [
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*"
    ],
    "connect:replicateinstance": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:resumecontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:resumecontactrecording": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchagentstatuses": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchavailablephonenumbers": [
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:searchcontactevaluations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchcontactflowmodules": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchcontactflows": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchcontacts": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchdatatables": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchemailaddresses": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchevaluationforms": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchhoursofoperationoverrides": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchhoursofoperations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchmetrics": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchnotifications": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchpredefinedattributes": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchprompts": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchqueues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchquickconnects": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchresourcetags": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchroutingprofiles": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchrules": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchsecurityprofiles": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchuserhierarchygroups": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchusers": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchviews": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchvocabularies": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchworkspaceassociations": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:searchworkspaces": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:sendoutboundchatmessage": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*"
    ],
    "connect:sendoutboundemail": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:sendoutboundwebnotification": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startattachedfileupload": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startchatcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startcontactconversationalanalyticsjob": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startcontactevaluation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startcontactmediaprocessing": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startcontactrecording": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startcontactstreaming": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startemailcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startevaluationformvalidation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startforecastingplanningschedulingintegration": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startoutboundchatcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*"
    ],
    "connect:startoutboundemailcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startscreensharing": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:starttaskcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:startwebrtccontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:stopcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:stopcontactmediaprocessing": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:stopcontactrecording": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:stopcontactstreaming": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:stopforecastingplanningschedulingintegration": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:submitcontactevaluation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:suspendcontactrecording": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:tagcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:tagresource": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:transfercontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:untagcontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:untagresource": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/*"
    ],
    "connect:updateagentstatus": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateattachedfilesconfiguration": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateauthenticationprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontact": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactattributes": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactevaluation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactflowcontent": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactflowmetadata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactflowmodulealias": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactflowmodulecontent": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactflowmodulemetadata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactflowname": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactroutingdata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecontactschedule": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatecrossregionrouting": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatedatatableattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatedatatablemetadata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatedatatableprimaryvalues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateemailaddressmetadata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateevaluationform": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateextractiondefinition": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatehoursofoperation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatehoursofoperationoverride": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateinstanceattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateinstancestorageconfig": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatemetriccontent": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:.*"
    ],
    "connect:updatemetricmetadata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:.*"
    ],
    "connect:updatenotificationcontent": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateparticipantauthentication": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateparticipantroleconfig": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatephonenumber": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:updatephonenumbermetadata": [
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*"
    ],
    "connect:updatepredefinedattribute": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateprompt": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatequeuehoursofoperation": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatequeuemaxcontacts": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatequeuename": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatequeueoutboundcallerconfig": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*",
      "arn:${Partition}:connect:${Region}:${Account}:phone-number/.*"
    ],
    "connect:updatequeueoutboundemailconfig": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatequeuestatus": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatequickconnectconfig": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatequickconnectname": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateroutingprofileagentavailabilitytimer": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateroutingprofileconcurrency": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateroutingprofiledefaultoutboundqueue": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateroutingprofilename": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateroutingprofilequeues": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updaterule": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatesecurityprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatetasktemplate": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updatetrafficdistribution": [
      "arn:${Partition}:connect:${Region}:${Account}:traffic-distribution-group/.*"
    ],
    "connect:updateuserhierarchy": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateuserhierarchygroupname": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateuserhierarchystructure": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateuseridentityinfo": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateusernotificationstatus": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateuserphoneconfig": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateuserproficiencies": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateuserroutingprofile": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateusersecurityprofiles": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateviewcontent": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateviewmetadata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateworkspacemetadata": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateworkspacepage": [
      "arn:${Partition}:connect:${Region}:aws:view/.*",
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateworkspacetheme": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "connect:updateworkspacevisibility": [
      "arn:${Partition}:connect:${Region}:${Account}:instance/.*"
    ],
    "consoleapp:getdeviceidentity": [
      "arn:${Partition}:consoleapp::${Account}:device/.*"
    ],
    "controlcatalog:getcontrol": [
      "arn:${Partition}:controlcatalog:::control/.*"
    ],
    "controlcatalog:listcontrols": [
      "arn:${Partition}:controlcatalog:::control/.*"
    ],
    "controltower:deletelandingzone": [
      "arn:${Partition}:controltower:${Region}:${Account}:landingzone/.*"
    ],
    "controltower:disablebaseline": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledbaseline/.*"
    ],
    "controltower:disablecontrol": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/.*"
    ],
    "controltower:enablecontrol": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/.*"
    ],
    "controltower:getbaseline": [
      "arn:${Partition}:controltower:${Region}::baseline/.*"
    ],
    "controltower:getenabledbaseline": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledbaseline/.*"
    ],
    "controltower:getenabledcontrol": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/.*"
    ],
    "controltower:getlandingzone": [
      "arn:${Partition}:controltower:${Region}:${Account}:landingzone/.*"
    ],
    "controltower:listtagsforresource": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledbaseline/.*",
      "arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/.*",
      "arn:${Partition}:controltower:${Region}:${Account}:landingzone/.*"
    ],
    "controltower:resetenabledbaseline": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledbaseline/.*"
    ],
    "controltower:resetenabledcontrol": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/.*"
    ],
    "controltower:resetlandingzone": [
      "arn:${Partition}:controltower:${Region}:${Account}:landingzone/.*"
    ],
    "controltower:tagresource": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledbaseline/.*",
      "arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/.*",
      "arn:${Partition}:controltower:${Region}:${Account}:landingzone/.*"
    ],
    "controltower:untagresource": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledbaseline/.*",
      "arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/.*",
      "arn:${Partition}:controltower:${Region}:${Account}:landingzone/.*"
    ],
    "controltower:updateenabledbaseline": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledbaseline/.*"
    ],
    "controltower:updateenabledcontrol": [
      "arn:${Partition}:controltower:${Region}:${Account}:enabledcontrol/.*"
    ],
    "controltower:updatelandingzone": [
      "arn:${Partition}:controltower:${Region}:${Account}:landingzone/.*"
    ],
    "cur:deletereportdefinition": [
      "arn:${Partition}:cur:${Region}:${Account}:definition/.*"
    ],
    "cur:listtagsforresource": [
      "arn:${Partition}:cur:${Region}:${Account}:definition/.*"
    ],
    "cur:modifyreportdefinition": [
      "arn:${Partition}:cur:${Region}:${Account}:definition/.*"
    ],
    "cur:putreportdefinition": [
      "arn:${Partition}:cur:${Region}:${Account}:definition/.*"
    ],
    "cur:tagresource": [
      "arn:${Partition}:cur:${Region}:${Account}:definition/.*"
    ],
    "cur:untagresource": [
      "arn:${Partition}:cur:${Region}:${Account}:definition/.*"
    ],
    "databrew:batchdeleterecipeversion": [
      "arn:${Partition}:databrew:${Region}:${Account}:recipe/.*"
    ],
    "databrew:deletedataset": [
      "arn:${Partition}:databrew:${Region}:${Account}:dataset/.*"
    ],
    "databrew:deletejob": [
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*"
    ],
    "databrew:deleteproject": [
      "arn:${Partition}:databrew:${Region}:${Account}:project/.*"
    ],
    "databrew:deleterecipeversion": [
      "arn:${Partition}:databrew:${Region}:${Account}:recipe/.*"
    ],
    "databrew:deleteruleset": [
      "arn:${Partition}:databrew:${Region}:${Account}:ruleset/.*"
    ],
    "databrew:deleteschedule": [
      "arn:${Partition}:databrew:${Region}:${Account}:schedule/.*"
    ],
    "databrew:describedataset": [
      "arn:${Partition}:databrew:${Region}:${Account}:dataset/.*"
    ],
    "databrew:describejob": [
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*"
    ],
    "databrew:describejobrun": [
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*"
    ],
    "databrew:describeproject": [
      "arn:${Partition}:databrew:${Region}:${Account}:project/.*"
    ],
    "databrew:describerecipe": [
      "arn:${Partition}:databrew:${Region}:${Account}:recipe/.*"
    ],
    "databrew:describeruleset": [
      "arn:${Partition}:databrew:${Region}:${Account}:ruleset/.*"
    ],
    "databrew:describeschedule": [
      "arn:${Partition}:databrew:${Region}:${Account}:schedule/.*"
    ],
    "databrew:listjobruns": [
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*"
    ],
    "databrew:listrecipeversions": [
      "arn:${Partition}:databrew:${Region}:${Account}:recipe/.*"
    ],
    "databrew:listtagsforresource": [
      "arn:${Partition}:databrew:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:project/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:recipe/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:ruleset/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:schedule/.*"
    ],
    "databrew:publishrecipe": [
      "arn:${Partition}:databrew:${Region}:${Account}:recipe/.*"
    ],
    "databrew:sendprojectsessionaction": [
      "arn:${Partition}:databrew:${Region}:${Account}:project/.*"
    ],
    "databrew:startjobrun": [
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*"
    ],
    "databrew:startprojectsession": [
      "arn:${Partition}:databrew:${Region}:${Account}:project/.*"
    ],
    "databrew:stopjobrun": [
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*"
    ],
    "databrew:tagresource": [
      "arn:${Partition}:databrew:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:project/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:recipe/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:ruleset/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:schedule/.*"
    ],
    "databrew:untagresource": [
      "arn:${Partition}:databrew:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:project/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:recipe/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:ruleset/.*",
      "arn:${Partition}:databrew:${Region}:${Account}:schedule/.*"
    ],
    "databrew:updatedataset": [
      "arn:${Partition}:databrew:${Region}:${Account}:dataset/.*"
    ],
    "databrew:updateprofilejob": [
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*"
    ],
    "databrew:updateproject": [
      "arn:${Partition}:databrew:${Region}:${Account}:project/.*"
    ],
    "databrew:updaterecipe": [
      "arn:${Partition}:databrew:${Region}:${Account}:recipe/.*"
    ],
    "databrew:updaterecipejob": [
      "arn:${Partition}:databrew:${Region}:${Account}:job/.*"
    ],
    "databrew:updateruleset": [
      "arn:${Partition}:databrew:${Region}:${Account}:ruleset/.*"
    ],
    "databrew:updateschedule": [
      "arn:${Partition}:databrew:${Region}:${Account}:schedule/.*"
    ],
    "dataexchange:acceptdatagrant": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/.*"
    ],
    "dataexchange:canceljob": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:jobs/.*"
    ],
    "dataexchange:createasset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:createdatagrant": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/.*"
    ],
    "dataexchange:createdataset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:createeventaction": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:event-actions/.*"
    ],
    "dataexchange:createjob": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:jobs/.*"
    ],
    "dataexchange:createrevision": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:deleteasset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:deletedatagrant": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/.*"
    ],
    "dataexchange:deletedataset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}::data-sets/.*"
    ],
    "dataexchange:deleteeventaction": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:event-actions/.*"
    ],
    "dataexchange:deleterevision": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:getasset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}::data-sets/.*"
    ],
    "dataexchange:getdatagrant": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/.*"
    ],
    "dataexchange:getdataset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}::data-sets/.*"
    ],
    "dataexchange:geteventaction": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:event-actions/.*"
    ],
    "dataexchange:getjob": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:jobs/.*"
    ],
    "dataexchange:getreceiveddatagrant": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/.*"
    ],
    "dataexchange:getrevision": [
      "arn:${Partition}:dataexchange:${Region}::data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:listdatasetrevisions": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}::data-sets/.*"
    ],
    "dataexchange:listrevisionassets": [
      "arn:${Partition}:dataexchange:${Region}::data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:listtagsforresource": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/.*",
      "arn:${Partition}:dataexchange:${Region}:${Account}:event-actions/.*"
    ],
    "dataexchange:publishdataset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:publishtodatagrant": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:revokerevision": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:sendapiasset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}::data-sets/.*"
    ],
    "dataexchange:senddatasetnotification": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:startjob": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:jobs/.*"
    ],
    "dataexchange:tagresource": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/.*",
      "arn:${Partition}:dataexchange:${Region}:${Account}:event-actions/.*"
    ],
    "dataexchange:untagresource": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*",
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/.*",
      "arn:${Partition}:dataexchange:${Region}:${Account}:event-actions/.*"
    ],
    "dataexchange:updateasset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:updatedataset": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "dataexchange:updateeventaction": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:event-actions/.*"
    ],
    "dataexchange:updaterevision": [
      "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/.*"
    ],
    "datapipeline:activatepipeline": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:addtags": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:deactivatepipeline": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:deletepipeline": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:describeobjects": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:describepipelines": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:evaluateexpression": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:getpipelinedefinition": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:putpipelinedefinition": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:queryobjects": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:removetags": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:reporttaskprogress": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:setstatus": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:settaskstatus": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datapipeline:validatepipelinedefinition": [
      "arn:${Partition}:datapipeline:${Region}:${Account}:pipeline/.*"
    ],
    "datasync:addstoragesystem": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:agent/.*"
    ],
    "datasync:canceltaskexecution": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datasync:createtask": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:agent/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:deleteagent": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:agent/.*"
    ],
    "datasync:deletelocation": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:deletetask": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datasync:describeagent": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:agent/.*"
    ],
    "datasync:describediscoveryjob": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:describelocationazureblob": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocationefs": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocationfsxlustre": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocationfsxontap": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocationfsxopenzfs": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocationfsxwindows": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocationhdfs": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocationnfs": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocationobjectstorage": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocations3": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describelocationsmb": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:describestoragesystem": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:describestoragesystemresourcemetrics": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:describestoragesystemresources": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:describetask": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datasync:describetaskexecution": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datasync:generaterecommendations": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:listtagsforresource": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:agent/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datasync:removestoragesystem": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:startdiscoveryjob": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:starttaskexecution": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datasync:stopdiscoveryjob": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:tagresource": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:agent/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datasync:untagresource": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:agent/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*",
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datasync:updateagent": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:agent/.*"
    ],
    "datasync:updatediscoveryjob": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:updatelocationazureblob": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocationefs": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocationfsxlustre": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocationfsxontap": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocationfsxopenzfs": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocationfsxwindows": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocationhdfs": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocationnfs": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocationobjectstorage": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocations3": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatelocationsmb": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:location/.*"
    ],
    "datasync:updatestoragesystem": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:system/.*"
    ],
    "datasync:updatetask": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datasync:updatetaskexecution": [
      "arn:${Partition}:datasync:${Region}:${AccountId}:task/.*"
    ],
    "datazone:batchdeletelinkedtypes": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "datazone:batchputlinkedtypes": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "datazone:deletedomain": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "datazone:getdomain": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "datazone:listlinkedtypes": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "datazone:listtagsforresource": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "datazone:startaccountbootstrapaction": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "datazone:tagresource": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "datazone:untagresource": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "datazone:updatedomain": [
      "arn:${Partition}:datazone:${Region}:${Account}:domain/.*"
    ],
    "dax:batchgetitem": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:batchwriteitem": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:conditioncheckitem": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:createcluster": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:decreasereplicationfactor": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:deletecluster": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:deleteitem": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:describeclusters": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:getitem": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:increasereplicationfactor": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:listtags": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:putitem": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:query": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:rebootnode": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:scan": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:tagresource": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:untagresource": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:updatecluster": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "dax:updateitem": [
      "arn:${Partition}:dax:${Region}:${Account}:cache/.*"
    ],
    "deadline:associatemembertofarm": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:associatemembertofleet": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:associatemembertojob": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:associatemembertoqueue": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:assumefleetroleforread": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:assumefleetroleforworker": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:assumequeueroleforread": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:assumequeueroleforuser": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:assumequeueroleforworker": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:batchgetjobentity": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:copyjobtemplate": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createbudget": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createfarm": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createfleet": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createjob": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createlicenseendpoint": [
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*"
    ],
    "deadline:createlimit": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createmonitor": [
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:createqueue": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createqueueenvironment": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createqueuefleetassociation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createqueuelimitassociation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createstorageprofile": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:createworker": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletebudget": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletefarm": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletefleet": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletelicenseendpoint": [
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*"
    ],
    "deadline:deletelimit": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletemeteredproduct": [
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*"
    ],
    "deadline:deletemonitor": [
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:deletequeue": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletequeueenvironment": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletequeuefleetassociation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletequeuelimitassociation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletestorageprofile": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deletevolume": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:deleteworker": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:disassociatememberfromfarm": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:disassociatememberfromfleet": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:disassociatememberfromjob": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:disassociatememberfromqueue": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getapplicationversion": [
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:getbudget": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getfarm": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getfleet": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getjob": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getjobtemplate": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getlicenseendpoint": [
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*"
    ],
    "deadline:getlimit": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getmonitor": [
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:getmonitorsettings": [
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:getqueue": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getqueueenvironment": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getqueuefleetassociation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getqueuelimitassociation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getsession": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getsessionaction": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getsessionsstatisticsaggregation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getstep": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getstorageprofile": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getstorageprofileforqueue": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:gettask": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getvolume": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:getworker": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listbudgets": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listfarmmembers": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listfarms": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listfleetmembers": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listfleets": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listjobmembers": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listjobparameterdefinitions": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listjobs": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listlicenseendpoints": [
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*"
    ],
    "deadline:listlimits": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listmeteredproducts": [
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*"
    ],
    "deadline:listmonitors": [
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:listqueueenvironments": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listqueuefleetassociations": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listqueuelimitassociations": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listqueuemembers": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listqueues": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listsessionactions": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listsessions": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listsessionsforworker": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:liststepconsumers": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:liststepdependencies": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:liststeps": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:liststorageprofiles": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:liststorageprofilesforqueue": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listtagsforresource": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*",
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*",
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:listtasks": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listvolumes": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:listworkers": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:putmeteredproduct": [
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*"
    ],
    "deadline:searchjobs": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:searchsteps": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:searchtasks": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:startsessionsstatisticsaggregation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:tagresource": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*",
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*",
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:untagresource": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*",
      "arn:${Partition}:deadline:${Region}:${Account}:license-endpoint/.*",
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:updatebudget": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatefarm": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatefleet": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatejob": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatelimit": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatemonitor": [
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:updatemonitorsettings": [
      "arn:${Partition}:deadline:${Region}:${Account}:monitor/.*"
    ],
    "deadline:updatequeue": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatequeueenvironment": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatequeuefleetassociation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatequeuelimitassociation": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatesession": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatestep": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatestorageprofile": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updatetask": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updateworker": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "deadline:updateworkerschedule": [
      "arn:${Partition}:deadline:${Region}:${Account}:farm/.*"
    ],
    "detective:acceptinvitation": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:batchgetgraphmemberdatasources": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:createmembers": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:deletegraph": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:deletemembers": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:describeorganizationconfiguration": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:disassociatemembership": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:getfreetrialeligibility": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:getgraphingeststate": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:getinvestigation": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:getmembers": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:getusageinformation": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:invokeassistant": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:listdatasourcepackages": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:listhighdegreeentities": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:listindicators": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:listinvestigations": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:listmembers": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:listtagsforresource": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:rejectinvitation": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:searchgraph": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:startinvestigation": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:startmonitoringmember": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:tagresource": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:untagresource": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:updatedatasourcepackages": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:updateinvestigationstate": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "detective:updateorganizationconfiguration": [
      "arn:${Partition}:detective:${Region}:${Account}:graph:.*"
    ],
    "devicefarm:createdevicepool": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:createnetworkprofile": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:createremoteaccesssession": [
      "arn:${Partition}:devicefarm:${Region}::device:.*",
      "arn:${Partition}:devicefarm:${Region}::deviceinstance:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:upload:.*"
    ],
    "devicefarm:createtestgridurl": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-project:.*"
    ],
    "devicefarm:createupload": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:deletedevicepool": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:.*"
    ],
    "devicefarm:deleteinstanceprofile": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:instanceprofile:.*"
    ],
    "devicefarm:deletenetworkprofile": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:networkprofile:.*"
    ],
    "devicefarm:deleteproject": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:deleteremoteaccesssession": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:session:.*"
    ],
    "devicefarm:deleterun": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:run:.*"
    ],
    "devicefarm:deletetestgridproject": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-project:.*"
    ],
    "devicefarm:deleteupload": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:upload:.*"
    ],
    "devicefarm:deletevpceconfiguration": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:vpceconfiguration:.*"
    ],
    "devicefarm:getdevice": [
      "arn:${Partition}:devicefarm:${Region}::device:.*"
    ],
    "devicefarm:getdeviceinstance": [
      "arn:${Partition}:devicefarm:${Region}::deviceinstance:.*"
    ],
    "devicefarm:getdevicepool": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:.*"
    ],
    "devicefarm:getdevicepoolcompatibility": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:upload:.*"
    ],
    "devicefarm:getinstanceprofile": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:instanceprofile:.*"
    ],
    "devicefarm:getjob": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:job:.*"
    ],
    "devicefarm:getnetworkprofile": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:networkprofile:.*"
    ],
    "devicefarm:getproject": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:getremoteaccesssession": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:session:.*"
    ],
    "devicefarm:getrun": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:run:.*"
    ],
    "devicefarm:getsuite": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:suite:.*"
    ],
    "devicefarm:gettest": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:test:.*"
    ],
    "devicefarm:gettestgridproject": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-project:.*"
    ],
    "devicefarm:gettestgridsession": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-project:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-session:.*"
    ],
    "devicefarm:getupload": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:upload:.*"
    ],
    "devicefarm:getvpceconfiguration": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:vpceconfiguration:.*"
    ],
    "devicefarm:installtoremoteaccesssession": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:session:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:upload:.*"
    ],
    "devicefarm:listartifacts": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:job:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:run:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:suite:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:test:.*"
    ],
    "devicefarm:listdevicepools": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:listjobs": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:run:.*"
    ],
    "devicefarm:listnetworkprofiles": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:listremoteaccesssessions": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:listruns": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:listsamples": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:job:.*"
    ],
    "devicefarm:listsuites": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:job:.*"
    ],
    "devicefarm:listtagsforresource": [
      "arn:${Partition}:devicefarm:${Region}::device:.*",
      "arn:${Partition}:devicefarm:${Region}::deviceinstance:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:instanceprofile:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:networkprofile:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:run:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:session:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-project:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-session:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:vpceconfiguration:.*"
    ],
    "devicefarm:listtestgridsessionactions": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-session:.*"
    ],
    "devicefarm:listtestgridsessionartifacts": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-session:.*"
    ],
    "devicefarm:listtestgridsessions": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-project:.*"
    ],
    "devicefarm:listtests": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:suite:.*"
    ],
    "devicefarm:listuniqueproblems": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:run:.*"
    ],
    "devicefarm:listuploads": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:schedulerun": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:upload:.*"
    ],
    "devicefarm:stopjob": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:job:.*"
    ],
    "devicefarm:stopremoteaccesssession": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:session:.*"
    ],
    "devicefarm:stoprun": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:run:.*"
    ],
    "devicefarm:tagresource": [
      "arn:${Partition}:devicefarm:${Region}::device:.*",
      "arn:${Partition}:devicefarm:${Region}::deviceinstance:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:instanceprofile:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:networkprofile:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:run:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:session:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-project:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-session:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:vpceconfiguration:.*"
    ],
    "devicefarm:untagresource": [
      "arn:${Partition}:devicefarm:${Region}::device:.*",
      "arn:${Partition}:devicefarm:${Region}::deviceinstance:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:instanceprofile:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:networkprofile:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:run:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:session:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-project:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-session:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:vpceconfiguration:.*"
    ],
    "devicefarm:updatedeviceinstance": [
      "arn:${Partition}:devicefarm:${Region}::deviceinstance:.*",
      "arn:${Partition}:devicefarm:${Region}:${Account}:instanceprofile:.*"
    ],
    "devicefarm:updatedevicepool": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:devicepool:.*"
    ],
    "devicefarm:updateinstanceprofile": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:instanceprofile:.*"
    ],
    "devicefarm:updatenetworkprofile": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:networkprofile:.*"
    ],
    "devicefarm:updateproject": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:project:.*"
    ],
    "devicefarm:updatetestgridproject": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:testgrid-project:.*"
    ],
    "devicefarm:updateupload": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:upload:.*"
    ],
    "devicefarm:updatevpceconfiguration": [
      "arn:${Partition}:devicefarm:${Region}:${Account}:vpceconfiguration:.*"
    ],
    "devops-guru:addnotificationchannel": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "devops-guru:removenotificationchannel": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "directconnect:acceptdirectconnectgatewayassociationproposal": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:allocateconnectiononinterconnect": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:allocatehostedconnection": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:allocateprivatevirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:allocatepublicvirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:allocatetransitvirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:associateconnectionstoresiliencygroup": [
      "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:associateconnectionwithlag": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:associatehostedconnection": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:associatemacseckey": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:associatevirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:confirmconnection": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:confirmprivatevirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:confirmpublicvirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:confirmtransitvirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:createbgppeer": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:createconnection": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:createdirectconnectgatewayassociation": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:createdirectconnectgatewayassociationproposal": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:createinterconnect": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:createlag": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:createprivatevirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:createpublicvirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:createtransitvirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:deletebgppeer": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:deleteconnection": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:deletedirectconnectgateway": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:deletedirectconnectgatewayassociation": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:deleteinterconnect": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:deletelag": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:deleteresiliencygroup": [
      "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/.*"
    ],
    "directconnect:deletevirtualinterface": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:describeconnectionloa": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:describeconnections": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:describeconnectionsoninterconnect": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:describedirectconnectgatewayassociationproposals": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:describedirectconnectgatewayassociations": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:describedirectconnectgatewayattachments": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:describedirectconnectgateways": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:describehostedconnections": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:describeinterconnectloa": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:describeinterconnects": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:describelags": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:describeloa": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:describerouterconfiguration": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:describetags": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*",
      "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:describevirtualinterfaces": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:disassociateconnectionfromlag": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:disassociateconnectionsfromresiliencygroup": [
      "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:disassociatemacseckey": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:getresiliencygroup": [
      "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/.*"
    ],
    "directconnect:listresiliencygroupassociations": [
      "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/.*"
    ],
    "directconnect:listvirtualinterfaceroutes": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:listvirtualinterfacetesthistory": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:startbgpfailovertest": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:stopbgpfailovertest": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:tagresource": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*",
      "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:untagresource": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*",
      "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*",
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "directconnect:updateconnection": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:updateconnectionsbillingmode": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/.*"
    ],
    "directconnect:updatedirectconnectgateway": [
      "arn:${Partition}:directconnect::${Account}:dx-gateway/.*"
    ],
    "directconnect:updatelag": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxlag/.*"
    ],
    "directconnect:updateresiliencygroup": [
      "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/.*"
    ],
    "directconnect:updatevirtualinterfaceattributes": [
      "arn:${Partition}:directconnect:${Region}:${Account}:dxvif/.*"
    ],
    "dlm:deletelifecyclepolicy": [
      "arn:${Partition}:dlm:${Region}:${Account}:policy/.*"
    ],
    "dlm:getlifecyclepolicy": [
      "arn:${Partition}:dlm:${Region}:${Account}:policy/.*"
    ],
    "dlm:listtagsforresource": [
      "arn:${Partition}:dlm:${Region}:${Account}:policy/.*"
    ],
    "dlm:tagresource": [
      "arn:${Partition}:dlm:${Region}:${Account}:policy/.*"
    ],
    "dlm:untagresource": [
      "arn:${Partition}:dlm:${Region}:${Account}:policy/.*"
    ],
    "dlm:updatelifecyclepolicy": [
      "arn:${Partition}:dlm:${Region}:${Account}:policy/.*"
    ],
    "dms:addtagstoresource": [
      "arn:${Partition}:dms:${Region}:${Account}:cert:*",
      "arn:${Partition}:dms:${Region}:${Account}:data-migration:*",
      "arn:${Partition}:dms:${Region}:${Account}:data-provider:*",
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*",
      "arn:${Partition}:dms:${Region}:${Account}:es:*",
      "arn:${Partition}:dms:${Region}:${Account}:instance-profile:*",
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*",
      "arn:${Partition}:dms:${Region}:${Account}:replication-config:*",
      "arn:${Partition}:dms:${Region}:${Account}:rep:*",
      "arn:${Partition}:dms:${Region}:${Account}:subgrp:*",
      "arn:${Partition}:dms:${Region}:${Account}:task:*",
      "arn:${Partition}:dms:${Region}:${Account}:assessment-run:*",
      "arn:${Partition}:dms:${Region}:${Account}:individual-assessment:*"
    ],
    "dms:applypendingmaintenanceaction": [
      "arn:${Partition}:dms:${Region}:${Account}:rep:*"
    ],
    "dms:associateextensionpack": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:cancelmetadatamodelconversion": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:cancelmetadatamodelcreation": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:cancelreplicationtaskassessmentrun": [
      "arn:${Partition}:dms:${Region}:${Account}:assessment-run:*"
    ],
    "dms:createdatamigration": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:createendpoint": [
      "arn:${Partition}:dms:${Region}:${Account}:cert:*",
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*"
    ],
    "dms:createeventsubscription": [
      "arn:${Partition}:dms:${Region}:${Account}:es:*"
    ],
    "dms:createmigrationproject": [
      "arn:${Partition}:dms:${Region}:${Account}:data-provider:*",
      "arn:${Partition}:dms:${Region}:${Account}:instance-profile:*"
    ],
    "dms:createreplicationconfig": [
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*"
    ],
    "dms:createreplicationinstance": [
      "arn:${Partition}:dms:${Region}:${Account}:rep:*",
      "arn:${Partition}:dms:${Region}:${Account}:subgrp:*"
    ],
    "dms:createreplicationsubnetgroup": [
      "arn:${Partition}:dms:${Region}:${Account}:subgrp:*"
    ],
    "dms:createreplicationtask": [
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*",
      "arn:${Partition}:dms:${Region}:${Account}:rep:*"
    ],
    "dms:deletecertificate": [
      "arn:${Partition}:dms:${Region}:${Account}:cert:*"
    ],
    "dms:deleteconnection": [
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*",
      "arn:${Partition}:dms:${Region}:${Account}:rep:*"
    ],
    "dms:deletedatamigration": [
      "arn:${Partition}:dms:${Region}:${Account}:data-migration:*"
    ],
    "dms:deletedataprovider": [
      "arn:${Partition}:dms:${Region}:${Account}:data-provider:*"
    ],
    "dms:deleteendpoint": [
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*"
    ],
    "dms:deleteeventsubscription": [
      "arn:${Partition}:dms:${Region}:${Account}:es:*"
    ],
    "dms:deleteinstanceprofile": [
      "arn:${Partition}:dms:${Region}:${Account}:instance-profile:*"
    ],
    "dms:deletemigrationproject": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:deletereplicationconfig": [
      "arn:${Partition}:dms:${Region}:${Account}:replication-config:*"
    ],
    "dms:deletereplicationinstance": [
      "arn:${Partition}:dms:${Region}:${Account}:rep:*"
    ],
    "dms:deletereplicationsubnetgroup": [
      "arn:${Partition}:dms:${Region}:${Account}:subgrp:*"
    ],
    "dms:deletereplicationtask": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:deletereplicationtaskassessmentrun": [
      "arn:${Partition}:dms:${Region}:${Account}:assessment-run:*"
    ],
    "dms:describeapplicableindividualassessments": [
      "arn:${Partition}:dms:${Region}:${Account}:rep:*",
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:describeconversionconfiguration": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:describemetadatamodel": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:describemetadatamodelchildren": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:describemetadatamodelcreations": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:describemetadatamodelimports": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:describerefreshschemasstatus": [
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*"
    ],
    "dms:describereplicationinstancetasklogs": [
      "arn:${Partition}:dms:${Region}:${Account}:rep:*"
    ],
    "dms:describereplicationtablestatistics": [
      "arn:${Partition}:dms:${Region}:${Account}:replication-config:*"
    ],
    "dms:describereplicationtaskassessmentresults": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:describereplicationtaskassessmentruns": [
      "arn:${Partition}:dms:${Region}:${Account}:rep:*",
      "arn:${Partition}:dms:${Region}:${Account}:task:*",
      "arn:${Partition}:dms:${Region}:${Account}:assessment-run:*"
    ],
    "dms:describereplicationtaskindividualassessments": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*",
      "arn:${Partition}:dms:${Region}:${Account}:assessment-run:*"
    ],
    "dms:describeschemas": [
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*"
    ],
    "dms:describetablestatistics": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:exportmetadatamodelassessment": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:getmetadatamodel": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:gettargetselectionrules": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:importcertificate": [
      "arn:${Partition}:dms:${Region}:${Account}:cert:*"
    ],
    "dms:listextensionpacks": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:listinstanceprofiles": [
      "arn:${Partition}:dms:${Region}:${Account}:instance-profile:*"
    ],
    "dms:listmetadatamodelassessmentactionitems": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:listmetadatamodelassessments": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:listmetadatamodelconversions": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:listmetadatamodelexports": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:listmigrationprojects": [
      "arn:${Partition}:dms:${Region}:${Account}:data-provider:*",
      "arn:${Partition}:dms:${Region}:${Account}:instance-profile:*",
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:listtagsforresource": [
      "arn:${Partition}:dms:${Region}:${Account}:cert:*",
      "arn:${Partition}:dms:${Region}:${Account}:data-migration:*",
      "arn:${Partition}:dms:${Region}:${Account}:data-provider:*",
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*",
      "arn:${Partition}:dms:${Region}:${Account}:es:*",
      "arn:${Partition}:dms:${Region}:${Account}:instance-profile:*",
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*",
      "arn:${Partition}:dms:${Region}:${Account}:replication-config:*",
      "arn:${Partition}:dms:${Region}:${Account}:rep:*",
      "arn:${Partition}:dms:${Region}:${Account}:subgrp:*",
      "arn:${Partition}:dms:${Region}:${Account}:task:*",
      "arn:${Partition}:dms:${Region}:${Account}:assessment-run:*",
      "arn:${Partition}:dms:${Region}:${Account}:individual-assessment:*"
    ],
    "dms:modifydatamigration": [
      "arn:${Partition}:dms:${Region}:${Account}:data-migration:*"
    ],
    "dms:modifyendpoint": [
      "arn:${Partition}:dms:${Region}:${Account}:cert:*",
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*"
    ],
    "dms:modifyeventsubscription": [
      "arn:${Partition}:dms:${Region}:${Account}:es:*"
    ],
    "dms:modifyreplicationconfig": [
      "arn:${Partition}:dms:${Region}:${Account}:replication-config:*"
    ],
    "dms:modifyreplicationinstance": [
      "arn:${Partition}:dms:${Region}:${Account}:rep:*"
    ],
    "dms:modifyreplicationsubnetgroup": [
      "arn:${Partition}:dms:${Region}:${Account}:subgrp:*"
    ],
    "dms:modifyreplicationtask": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:movereplicationtask": [
      "arn:${Partition}:dms:${Region}:${Account}:rep:*",
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:rebootreplicationinstance": [
      "arn:${Partition}:dms:${Region}:${Account}:rep:*"
    ],
    "dms:refreshschemas": [
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*",
      "arn:${Partition}:dms:${Region}:${Account}:rep:*"
    ],
    "dms:reloadreplicationtables": [
      "arn:${Partition}:dms:${Region}:${Account}:replication-config:*"
    ],
    "dms:reloadtables": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:removetagsfromresource": [
      "arn:${Partition}:dms:${Region}:${Account}:cert:*",
      "arn:${Partition}:dms:${Region}:${Account}:data-migration:*",
      "arn:${Partition}:dms:${Region}:${Account}:data-provider:*",
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*",
      "arn:${Partition}:dms:${Region}:${Account}:es:*",
      "arn:${Partition}:dms:${Region}:${Account}:instance-profile:*",
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*",
      "arn:${Partition}:dms:${Region}:${Account}:replication-config:*",
      "arn:${Partition}:dms:${Region}:${Account}:rep:*",
      "arn:${Partition}:dms:${Region}:${Account}:subgrp:*",
      "arn:${Partition}:dms:${Region}:${Account}:task:*",
      "arn:${Partition}:dms:${Region}:${Account}:assessment-run:*",
      "arn:${Partition}:dms:${Region}:${Account}:individual-assessment:*"
    ],
    "dms:startdatamigration": [
      "arn:${Partition}:dms:${Region}:${Account}:data-migration:*"
    ],
    "dms:startmetadatamodelassessment": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:startmetadatamodelconversion": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:startmetadatamodelcreation": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:startmetadatamodelexportasscripts": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:startmetadatamodelexporttotarget": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:startmetadatamodelimport": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:startreplication": [
      "arn:${Partition}:dms:${Region}:${Account}:replication-config:*"
    ],
    "dms:startreplicationtask": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:startreplicationtaskassessment": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:startreplicationtaskassessmentrun": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:stopdatamigration": [
      "arn:${Partition}:dms:${Region}:${Account}:data-migration:*"
    ],
    "dms:stopreplication": [
      "arn:${Partition}:dms:${Region}:${Account}:replication-config:*"
    ],
    "dms:stopreplicationtask": [
      "arn:${Partition}:dms:${Region}:${Account}:task:*"
    ],
    "dms:testconnection": [
      "arn:${Partition}:dms:${Region}:${Account}:endpoint:*",
      "arn:${Partition}:dms:${Region}:${Account}:rep:*"
    ],
    "dms:updateconversionconfiguration": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "dms:updatedataprovider": [
      "arn:${Partition}:dms:${Region}:${Account}:data-provider:*"
    ],
    "dms:updateinstanceprofile": [
      "arn:${Partition}:dms:${Region}:${Account}:instance-profile:*"
    ],
    "dms:updatemigrationproject": [
      "arn:${Partition}:dms:${Region}:${Account}:migration-project:*"
    ],
    "docdb-elastic:applypendingmaintenanceaction": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*"
    ],
    "docdb-elastic:copyclustersnapshot": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster-snapshot/.*"
    ],
    "docdb-elastic:createclustersnapshot": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster-snapshot/.*"
    ],
    "docdb-elastic:deletecluster": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*"
    ],
    "docdb-elastic:deleteclustersnapshot": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster-snapshot/.*"
    ],
    "docdb-elastic:getcluster": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*"
    ],
    "docdb-elastic:getclustersnapshot": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster-snapshot/.*"
    ],
    "docdb-elastic:getpendingmaintenanceaction": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*"
    ],
    "docdb-elastic:listtagsforresource": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster-snapshot/.*"
    ],
    "docdb-elastic:restoreclusterfromsnapshot": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster-snapshot/.*"
    ],
    "docdb-elastic:startcluster": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*"
    ],
    "docdb-elastic:stopcluster": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*"
    ],
    "docdb-elastic:tagresource": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster-snapshot/.*"
    ],
    "docdb-elastic:untagresource": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster-snapshot/.*"
    ],
    "docdb-elastic:updatecluster": [
      "arn:${Partition}:docdb-elastic:${Region}:${Account}:cluster/.*"
    ],
    "drs:associatefailbackclienttorecoveryinstancefordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:associatesourcenetworkstack": [
      "arn:${Partition}:drs:${Region}:${Account}:source-network/.*"
    ],
    "drs:batchcreatevolumesnapshotgroupfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:cancelrecoveryplanexecution": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/.*"
    ],
    "drs:createconvertedsnapshotfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:createrecoveryinstancefordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:createrecoveryplanstep": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:deletejob": [
      "arn:${Partition}:drs:${Region}:${Account}:job/.*"
    ],
    "drs:deletelaunchaction": [
      "arn:${Partition}:drs:${Region}:${Account}:launch-configuration-template/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:deletelaunchconfigurationtemplate": [
      "arn:${Partition}:drs:${Region}:${Account}:launch-configuration-template/.*"
    ],
    "drs:deleterecoveryinstance": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:deleterecoveryplan": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:deleterecoveryplanexecution": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/.*"
    ],
    "drs:deleterecoveryplanstep": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:deletereplicationconfigurationtemplate": [
      "arn:${Partition}:drs:${Region}:${Account}:replication-configuration-template/.*"
    ],
    "drs:deletesourcenetwork": [
      "arn:${Partition}:drs:${Region}:${Account}:source-network/.*"
    ],
    "drs:deletesourceserver": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:describejoblogitems": [
      "arn:${Partition}:drs:${Region}:${Account}:job/.*"
    ],
    "drs:describerecoverysnapshots": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:disconnectrecoveryinstance": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:disconnectsourceserver": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:exportsourcenetworkcfntemplate": [
      "arn:${Partition}:drs:${Region}:${Account}:source-network/.*"
    ],
    "drs:getagentcommandfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:getagentconfirmedresumeinfofordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:getagentreplicationinfofordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:getagentruntimeconfigurationfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:getagentsnapshotcreditsfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:getfailbackcommandfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:getfailbacklaunchrequestedfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:getfailbackreplicationconfiguration": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:getlaunchconfiguration": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:getrecoveryplan": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:getrecoveryplanexecution": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/.*"
    ],
    "drs:getrecoveryplanexecutionstep": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/.*"
    ],
    "drs:getrecoveryplanstep": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:getreplicationconfiguration": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:getsuggestedfailbackclientdevicemappingfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:issueagentcertificatefordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:listlaunchactions": [
      "arn:${Partition}:drs:${Region}:${Account}:launch-configuration-template/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:listrecoveryplanexecutions": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:listrecoveryplanexecutionsteps": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/.*"
    ],
    "drs:listrecoveryplansteps": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:notifyagentauthenticationfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:notifyagentconnectedfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:notifyagentdisconnectedfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:notifyagentreplicationprogressfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:notifyconsistencyattainedfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:notifyreplicationserverauthenticationfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:notifyvolumeeventfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:putlaunchaction": [
      "arn:${Partition}:drs:${Region}:${Account}:launch-configuration-template/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:reorderrecoveryplansteps": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:retrydatareplication": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:retryrecoveryplanexecutionstep": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/.*"
    ],
    "drs:reversereplication": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:sendagentlogsfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:sendagentmetricsfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:sendvolumestatsfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:startfailbacklaunch": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:startrecovery": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:startrecoveryplanexecution": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:startreplication": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:startsourcenetworkrecovery": [
      "arn:${Partition}:drs:${Region}:${Account}:source-network/.*"
    ],
    "drs:startsourcenetworkreplication": [
      "arn:${Partition}:drs:${Region}:${Account}:source-network/.*"
    ],
    "drs:stopfailback": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:stopreplication": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:stopsourcenetworkreplication": [
      "arn:${Partition}:drs:${Region}:${Account}:source-network/.*"
    ],
    "drs:tagresource": [
      "arn:${Partition}:drs:${Region}:${Account}:job/.*",
      "arn:${Partition}:drs:${Region}:${Account}:launch-configuration-template/.*",
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/.*",
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*",
      "arn:${Partition}:drs:${Region}:${Account}:replication-configuration-template/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-network/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:terminaterecoveryinstances": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:untagresource": [
      "arn:${Partition}:drs:${Region}:${Account}:job/.*",
      "arn:${Partition}:drs:${Region}:${Account}:launch-configuration-template/.*",
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/.*",
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*",
      "arn:${Partition}:drs:${Region}:${Account}:replication-configuration-template/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-network/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:updateagentbacklogfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:updateagentconversioninfofordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:updateagentreplicationinfofordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:updateagentreplicationprocessstatefordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:updateagentsourcepropertiesfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*",
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:updatefailbackclientdevicemappingfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:updatefailbackclientlastseenfordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:updatefailbackreplicationconfiguration": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:updatelaunchconfiguration": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:updatelaunchconfigurationtemplate": [
      "arn:${Partition}:drs:${Region}:${Account}:launch-configuration-template/.*"
    ],
    "drs:updaterecoveryplan": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:updaterecoveryplanexecutionstep": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/.*"
    ],
    "drs:updaterecoveryplanstep": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-plan/.*"
    ],
    "drs:updatereplicationcertificatefordrs": [
      "arn:${Partition}:drs:${Region}:${Account}:recovery-instance/.*"
    ],
    "drs:updatereplicationconfiguration": [
      "arn:${Partition}:drs:${Region}:${Account}:source-server/.*"
    ],
    "drs:updatereplicationconfigurationtemplate": [
      "arn:${Partition}:drs:${Region}:${Account}:replication-configuration-template/.*"
    ],
    "ds-data:addgroupmember": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:creategroup": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:createuser": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:deletegroup": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:deleteuser": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:describegroup": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:describeuser": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:disableuser": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:listgroupmembers": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:listgroups": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:listgroupsformember": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:listusers": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:removegroupmember": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:searchgroups": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:searchusers": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:updategroup": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds-data:updateuser": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:acceptshareddirectory": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:accessdsdata": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:addiproutes": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:addregion": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:addtagstoresource": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:authorizeapplication": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:cancelschemaextension": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:createalias": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:createcomputer": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:createconditionalforwarder": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:createlogsubscription": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:createsnapshot": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:createtrust": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:deleteconditionalforwarder": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:deletedirectory": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:deletelogsubscription": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:deletesnapshot": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:deletetrust": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:deregistercertificate": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:deregistereventtopic": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describecaenrollmentpolicy": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describecertificate": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describeclientauthenticationsettings": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describeconditionalforwarders": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describedirectorydataaccess": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describedomaincontrollers": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describeeventtopics": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describehybridadupdate": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describeldapssettings": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describeregions": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describesettings": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describeshareddirectories": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:describeupdatedirectory": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:disablecaenrollmentpolicy": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:disableclientauthentication": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:disabledirectorydataaccess": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:disableldaps": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:disableradius": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:disableroleaccess": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:disablesso": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:enablecaenrollmentpolicy": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:enableclientauthentication": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:enabledirectorydataaccess": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:enableldaps": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:enableradius": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:enableroleaccess": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:enablesso": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:getauthorizedapplicationdetails": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:getsnapshotlimits": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:listauthorizedapplications": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:listcertificates": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:listiproutes": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:listschemaextensions": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:listtagsforresource": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:registercertificate": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:registereventtopic": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:rejectshareddirectory": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:removeiproutes": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:removeregion": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:removetagsfromresource": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:resetuserpassword": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:restorefromsnapshot": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:sharedirectory": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:startschemaextension": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:unauthorizeapplication": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:unsharedirectory": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:updateauthorizedapplication": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:updateconditionalforwarder": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:updatedirectory": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:updatedirectorysetup": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:updatehybridad": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:updatenumberofdomaincontrollers": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:updateradius": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:updatesettings": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:updatetrust": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "ds:verifytrust": [
      "arn:${Partition}:ds:${Region}:${Account}:directory/.*"
    ],
    "dsql:addpeercluster": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:createcluster": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:createstream": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:dbconnect": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:dbconnectadmin": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:deletecluster": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:deleteclusterpolicy": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:deletestream": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:getbackupjob": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:getcluster": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:getclusterpolicy": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:getrestorejob": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:getstream": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:getvpcendpointservicename": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:liststreams": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:listtagsforresource": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:putclusterpolicy": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:putmultiregionproperties": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:putwitnessregion": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:removepeercluster": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:startbackupjob": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:startrestorejob": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:stopbackupjob": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:stoprestorejob": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:tagresource": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:untagresource": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:updatecluster": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dsql:updatestream": [
      "arn:${Partition}:dsql:${Region}:${Account}:cluster/.*"
    ],
    "dynamodb:associatetablereplica": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:batchgetitem": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:batchwriteitem": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:conditioncheckitem": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:createbackup": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:createglobaltable": [
      "arn:${Partition}:dynamodb::${Account}:global-table/.*",
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:createglobaltablewitness": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:createtable": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:createtablereplica": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:deletebackup": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:deleteglobaltablewitness": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:deleteitem": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:deleteresourcepolicy": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:deletetable": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:deletetablereplica": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describebackup": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describecontinuousbackups": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describecontributorinsights": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describeexport": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describeglobaltable": [
      "arn:${Partition}:dynamodb::${Account}:global-table/.*"
    ],
    "dynamodb:describeglobaltablesettings": [
      "arn:${Partition}:dynamodb::${Account}:global-table/.*"
    ],
    "dynamodb:describeimport": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describekinesisstreamingdestination": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describestream": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describetable": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describetablereplicaautoscaling": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:describetimetolive": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:disablekinesisstreamingdestination": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:enablekinesisstreamingdestination": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:exporttabletopointintime": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:getitem": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:getrecords": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:getresourcepolicy": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:getsharditerator": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:importtable": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:listexports": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:listimports": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:listtagsofresource": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:partiqldelete": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:partiqlinsert": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:partiqlselect": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:partiqlupdate": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:putitem": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:putresourcepolicy": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:query": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:readdataforreplication": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:replicatesettings": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:restoretablefromawsbackup": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:restoretablefrombackup": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:restoretabletopointintime": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:scan": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:searchvectors": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:startawsbackupjob": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:tagresource": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:untagresource": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updatecontinuousbackups": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updatecontributorinsights": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updateglobaltable": [
      "arn:${Partition}:dynamodb::${Account}:global-table/.*",
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updateglobaltablesettings": [
      "arn:${Partition}:dynamodb::${Account}:global-table/.*",
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updateglobaltableversion": [
      "arn:${Partition}:dynamodb::${Account}:global-table/.*",
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updateitem": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updatekinesisstreamingdestination": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updatetable": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updatetablereplicaautoscaling": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:updatetimetolive": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "dynamodb:writedataforreplication": [
      "arn:${Partition}:dynamodb:${Region}:${Account}:table/.*"
    ],
    "ebs:completesnapshot": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ebs:getsnapshotblock": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ebs:listchangedblocks": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ebs:listsnapshotblocks": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ebs:putsnapshotblock": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ebs:startsnapshot": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2-instance-connect:opentunnel": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance-connect-endpoint/.*"
    ],
    "ec2-instance-connect:sendserialconsolesshpublickey": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2-instance-connect:sendsshpublickey": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:acceptaddresstransfer": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*"
    ],
    "ec2:acceptcapacityreservationbillingownership": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:acceptreservedinstancesexchangequote": [
      "arn:${Partition}:ec2:${Region}:${Account}:reserved-instances/.*"
    ],
    "ec2:accepttransitgatewayclientvpnattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:accepttransitgatewaymulticastdomainassociations": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:accepttransitgatewaypeeringattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:accepttransitgatewayvpcattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:acceptvpcendpointconnections": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:acceptvpcpeeringconnection": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/.*"
    ],
    "ec2:allocateaddress": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*",
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*"
    ],
    "ec2:allocatehosts": [
      "arn:${Partition}:ec2:${Region}:${Account}:dedicated-host/.*"
    ],
    "ec2:allocateipampoolcidr": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipam-pool-allocation/.*"
    ],
    "ec2:applysecuritygroupstoclientvpntargetnetwork": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:assignipv6addresses": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:assignprivateipaddresses": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:assignprivatenatgatewayaddress": [
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*"
    ],
    "ec2:associateaddress": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:associateapplicationstatuscheck": [
      "arn:${Partition}:ec2:${Region}:${Account}:application-status-check/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:associatecapacityreservationbillingowner": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:associateclientvpntargetnetwork": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:associatedhcpoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:dhcp-options/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:associateenclavecertificateiamrole": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*",
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "ec2:associateiaminstanceprofile": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:associateinstanceeventwindow": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance-event-window/.*"
    ],
    "ec2:associateipamresourcediscovery": [
      "arn:${Partition}:ec2::${Account}:ipam/.*",
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*",
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery-association/.*"
    ],
    "ec2:associatenatgatewayaddress": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*"
    ],
    "ec2:associaterouteserver": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:associateroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:associatesecuritygroupvpc": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:associatesubnetcidrblock": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:associatetransitgatewaymulticastdomain": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:associatetransitgatewaypolicytable": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*"
    ],
    "ec2:associatetransitgatewayroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:associateverifiedaccessinstancewebacl": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:associatevpccidrblock": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv6pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:attachappliancetonatgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*"
    ],
    "ec2:attachclassiclinkvpc": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:attachimagewatermark": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:attachinternetgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:attachnetworkinterface": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:attachresourcestoplacementgroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*"
    ],
    "ec2:attachverifiedaccesstrustprovider": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-trust-provider/.*"
    ],
    "ec2:attachvolume": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:attachvpngateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:authorizeclientvpningress": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:authorizesecuritygroupegress": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group-rule/.*"
    ],
    "ec2:authorizesecuritygroupingress": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group-rule/.*"
    ],
    "ec2:batchmodifyipamroutingpolicyregistrations": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:cancelcapacityreservation": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-cancellation-quote/.*"
    ],
    "ec2:cancelcapacityreservationfleets": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/.*"
    ],
    "ec2:canceldeclarativepoliciesreport": [
      "arn:${Partition}:ec2:${Region}:${Account}:declarative-policies-report/.*"
    ],
    "ec2:cancelexporttask": [
      "arn:${Partition}:ec2:${Region}:${Account}:export-image-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:export-instance-task/.*"
    ],
    "ec2:cancelimagelaunchpermission": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:cancelimporttask": [
      "arn:${Partition}:ec2:${Region}:${Account}:import-image-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:import-snapshot-task/.*"
    ],
    "ec2:cancelspotfleetrequests": [
      "arn:${Partition}:ec2:${Region}:${Account}:spot-fleet-request/.*"
    ],
    "ec2:cancelspotinstancerequests": [
      "arn:${Partition}:ec2:${Region}:${Account}:spot-instances-request/.*"
    ],
    "ec2:copyfpgaimage": [
      "arn:${Partition}:ec2:${Region}:${Account}:fpga-image/.*"
    ],
    "ec2:copyimage": [
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:copysnapshot": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:copyvolumes": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:createapplicationstatuscheck": [
      "arn:${Partition}:ec2:${Region}:${Account}:application-status-check/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:createcapacitymanagerdataexport": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-manager-data-export/.*"
    ],
    "ec2:createcapacityreservation": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:createcapacityreservationbysplitting": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:createcapacityreservationcancellationquote": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-cancellation-quote/.*"
    ],
    "ec2:createcapacityreservationfleet": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/.*"
    ],
    "ec2:createcarriergateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:carrier-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createclientvpnendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createclientvpnroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:createcoipcidr": [
      "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/.*"
    ],
    "ec2:createcoippool": [
      "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*"
    ],
    "ec2:createcoippoolpermission": [
      "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/.*"
    ],
    "ec2:createcustomergateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:customer-gateway/.*"
    ],
    "ec2:createdelegatemacvolumeownershiptask": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:mac-modification-task/.*"
    ],
    "ec2:createdhcpoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:dhcp-options/.*"
    ],
    "ec2:createegressonlyinternetgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:egress-only-internet-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createfleet": [
      "arn:${Partition}:ec2:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:createflowlogs": [
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-flow-log/.*"
    ],
    "ec2:createfpgaimage": [
      "arn:${Partition}:ec2:${Region}:${Account}:fpga-image/.*"
    ],
    "ec2:createimage": [
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:createimageusagereport": [
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:image-usage-report/.*"
    ],
    "ec2:createinstanceconnectendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance-connect-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:createinstanceeventwindow": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance-event-window/.*"
    ],
    "ec2:createinstanceexporttask": [
      "arn:${Partition}:ec2:${Region}:${Account}:export-instance-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:createinternetgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*"
    ],
    "ec2:createinterruptiblecapacityreservationallocation": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:createipam": [
      "arn:${Partition}:ec2::${Account}:ipam/.*"
    ],
    "ec2:createipamexternalresourceverificationtoken": [
      "arn:${Partition}:ec2::${Account}:ipam/.*",
      "arn:${Partition}:ec2::${Account}:ipam-external-resource-verification-token/.*"
    ],
    "ec2:createipaminternetregistryassociation": [
      "arn:${Partition}:ec2::${Account}:ipam/.*",
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:createipampolicy": [
      "arn:${Partition}:ec2::${Account}:ipam/.*",
      "arn:${Partition}:ec2::${Account}:ipam-policy/.*"
    ],
    "ec2:createipampool": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*"
    ],
    "ec2:createipamprefixlistresolver": [
      "arn:${Partition}:ec2::${Account}:ipam/.*",
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/.*",
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*"
    ],
    "ec2:createipamprefixlistresolvertarget": [
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/.*",
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver-target/.*"
    ],
    "ec2:createipamresourcediscovery": [
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*"
    ],
    "ec2:createipamroutingpolicyregistration": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:createipamscope": [
      "arn:${Partition}:ec2::${Account}:ipam/.*",
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*"
    ],
    "ec2:createkeypair": [
      "arn:${Partition}:ec2:${Region}:${Account}:key-pair/.*"
    ],
    "ec2:createlaunchtemplate": [
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*"
    ],
    "ec2:createlaunchtemplateversion": [
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*"
    ],
    "ec2:createlocalgatewayroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*"
    ],
    "ec2:createlocalgatewayroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*"
    ],
    "ec2:createlocalgatewayroutetablepermission": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*"
    ],
    "ec2:createlocalgatewayroutetablevirtualinterfacegroupassociation": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-virtual-interface-group-association/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/.*"
    ],
    "ec2:createlocalgatewayroutetablevpcassociation": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-vpc-association/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createlocalgatewayvirtualinterface": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:outpost-lag/.*"
    ],
    "ec2:createlocalgatewayvirtualinterfacegroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/.*"
    ],
    "ec2:createmacsystemintegrityprotectionmodificationtask": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:mac-modification-task/.*"
    ],
    "ec2:createmanagedprefixlist": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*"
    ],
    "ec2:createnatgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createnetworkacl": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-acl/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createnetworkaclentry": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-acl/.*"
    ],
    "ec2:createnetworkinsightsaccessscope": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope/.*"
    ],
    "ec2:createnetworkinsightspath": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-path/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:createnetworkinterface": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:createnetworkinterfacepermission": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:createodbnetworkpeering": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createplacementgroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*"
    ],
    "ec2:createpublicipv4pool": [
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*"
    ],
    "ec2:createreplacerootvolumetask": [
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:replace-root-volume-task/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:createrestoreimagetask": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:createroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*"
    ],
    "ec2:createrouteserver": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*"
    ],
    "ec2:createrouteserverendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-server-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:createrouteserverpeer": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-server-peer/.*"
    ],
    "ec2:createroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createsecondarynetwork": [
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-network/.*"
    ],
    "ec2:createsecondarysubnet": [
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-network/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-subnet/.*"
    ],
    "ec2:createsecuritygroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createsnapshot": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:createsnapshots": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:createstoreimagetask": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:createsubnet": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createsubnetcidrreservation": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:createtags": [
      "arn:${Partition}:ec2:${Region}:${Account}:application-status-check/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-block/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-manager-data-export/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-cancellation-quote/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:carrier-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:customer-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:declarative-policies-report/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:dedicated-host/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:dhcp-options/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:egress-only-internet-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-gpu/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:export-image-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:export-instance-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:fpga-image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:host-reservation/.*",
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:image-usage-report/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:import-image-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:import-snapshot-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance-connect-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance-event-window/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*",
      "arn:${Partition}:ec2::${Account}:ipam/.*",
      "arn:${Partition}:ec2::${Account}:ipam-external-resource-verification-token/.*",
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*",
      "arn:${Partition}:ec2::${Account}:ipam-policy/.*",
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipam-pool-allocation/.*",
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/.*",
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver-target/.*",
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*",
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery-association/.*",
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv6pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:key-pair/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-virtual-interface-group-association/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-vpc-association/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-acl/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope-analysis/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-analysis/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-path/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:replace-root-volume-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:reserved-instances/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-server-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-server-peer/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-network/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group-rule/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:spot-fleet-request/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:spot-instances-request/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet-cidr-reservation/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter-rule/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-session/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-target/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-connect-peer/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table-announcement/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint-target/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-policy/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-trust-provider/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-block-public-access-exclusion/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-encryption-control/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-connection/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service-permission/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-flow-log/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-concentrator/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:createtrafficmirrorfilter": [
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*"
    ],
    "ec2:createtrafficmirrorfilterrule": [
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter-rule/.*"
    ],
    "ec2:createtrafficmirrorsession": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-session/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-target/.*"
    ],
    "ec2:createtrafficmirrortarget": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-target/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*"
    ],
    "ec2:createtransitgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*"
    ],
    "ec2:createtransitgatewayconnect": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:createtransitgatewayconnectpeer": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-connect-peer/.*"
    ],
    "ec2:createtransitgatewaymeteringpolicy": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/.*"
    ],
    "ec2:createtransitgatewaymeteringpolicyentry": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/.*"
    ],
    "ec2:createtransitgatewaymulticastdomain": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:createtransitgatewaypeeringattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:createtransitgatewaypolicytable": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*"
    ],
    "ec2:createtransitgatewaypolicytableentry": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:createtransitgatewayprefixlistreference": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:createtransitgatewayroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:createtransitgatewayroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:createtransitgatewayroutetableannouncement": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table-announcement/.*"
    ],
    "ec2:createtransitgatewayvpcattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createverifiedaccessendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*"
    ],
    "ec2:createverifiedaccessgroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:createverifiedaccessinstance": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:createverifiedaccesstrustprovider": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-trust-provider/.*"
    ],
    "ec2:createvolume": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:createvpc": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv6pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:createvpcblockpublicaccessexclusion": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-block-public-access-exclusion/.*"
    ],
    "ec2:createvpcencryptioncontrol": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-encryption-control/.*"
    ],
    "ec2:createvpcendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*"
    ],
    "ec2:createvpcendpointconnectionnotification": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:createvpcendpointserviceconfiguration": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:createvpcpeeringconnection": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/.*"
    ],
    "ec2:createvpnconcentrator": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-concentrator/.*"
    ],
    "ec2:createvpnconnection": [
      "arn:${Partition}:ec2:${Region}:${Account}:customer-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-concentrator/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:createvpnconnectionroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:createvpngateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:deleteapplicationstatuscheck": [
      "arn:${Partition}:ec2:${Region}:${Account}:application-status-check/.*"
    ],
    "ec2:deletecapacitymanagerdataexport": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-manager-data-export/.*"
    ],
    "ec2:deletecarriergateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:carrier-gateway/.*"
    ],
    "ec2:deleteclientvpnendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:deleteclientvpnroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:deletecoipcidr": [
      "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/.*"
    ],
    "ec2:deletecoippool": [
      "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/.*"
    ],
    "ec2:deletecoippoolpermission": [
      "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/.*"
    ],
    "ec2:deletecustomergateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:customer-gateway/.*"
    ],
    "ec2:deletedhcpoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:dhcp-options/.*"
    ],
    "ec2:deleteegressonlyinternetgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:egress-only-internet-gateway/.*"
    ],
    "ec2:deletefleets": [
      "arn:${Partition}:ec2:${Region}:${Account}:fleet/.*"
    ],
    "ec2:deleteflowlogs": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-flow-log/.*"
    ],
    "ec2:deletefpgaimage": [
      "arn:${Partition}:ec2:${Region}:${Account}:fpga-image/.*"
    ],
    "ec2:deleteimageusagereport": [
      "arn:${Partition}:ec2:${Region}:${Account}:image-usage-report/.*"
    ],
    "ec2:deleteinstanceconnectendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance-connect-endpoint/.*"
    ],
    "ec2:deleteinstanceeventwindow": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance-event-window/.*"
    ],
    "ec2:deleteinternetgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*"
    ],
    "ec2:deleteipam": [
      "arn:${Partition}:ec2::${Account}:ipam/.*"
    ],
    "ec2:deleteipamexternalresourceverificationtoken": [
      "arn:${Partition}:ec2::${Account}:ipam-external-resource-verification-token/.*"
    ],
    "ec2:deleteipaminternetregistryassociation": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:deleteipampolicy": [
      "arn:${Partition}:ec2::${Account}:ipam-policy/.*"
    ],
    "ec2:deleteipampool": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:deleteipamprefixlistresolver": [
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/.*"
    ],
    "ec2:deleteipamprefixlistresolvertarget": [
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver-target/.*"
    ],
    "ec2:deleteipamresourcediscovery": [
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*"
    ],
    "ec2:deleteipamroutingpolicyregistration": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:deleteipamscope": [
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*"
    ],
    "ec2:deletekeypair": [
      "arn:${Partition}:ec2:${Region}:${Account}:key-pair/.*"
    ],
    "ec2:deletelaunchtemplate": [
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*"
    ],
    "ec2:deletelaunchtemplateversions": [
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*"
    ],
    "ec2:deletelocalgatewayroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*"
    ],
    "ec2:deletelocalgatewayroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*"
    ],
    "ec2:deletelocalgatewayroutetablepermission": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*"
    ],
    "ec2:deletelocalgatewayroutetablevirtualinterfacegroupassociation": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-virtual-interface-group-association/.*"
    ],
    "ec2:deletelocalgatewayroutetablevpcassociation": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-vpc-association/.*"
    ],
    "ec2:deletelocalgatewayvirtualinterface": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface/.*"
    ],
    "ec2:deletelocalgatewayvirtualinterfacegroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/.*"
    ],
    "ec2:deletemanagedprefixlist": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*"
    ],
    "ec2:deletenatgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*"
    ],
    "ec2:deletenetworkacl": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-acl/.*"
    ],
    "ec2:deletenetworkaclentry": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-acl/.*"
    ],
    "ec2:deletenetworkinsightsaccessscope": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope/.*"
    ],
    "ec2:deletenetworkinsightsaccessscopeanalysis": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope-analysis/.*"
    ],
    "ec2:deletenetworkinsightsanalysis": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-analysis/.*"
    ],
    "ec2:deletenetworkinsightspath": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-path/.*"
    ],
    "ec2:deletenetworkinterface": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:deletenetworkinterfacepermission": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:deleteodbnetworkpeering": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:deleteplacementgroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*"
    ],
    "ec2:deletepublicipv4pool": [
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*"
    ],
    "ec2:deletequeuedreservedinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:reserved-instances/.*"
    ],
    "ec2:deleteresourcepolicy": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*"
    ],
    "ec2:deleteroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*"
    ],
    "ec2:deleterouteserver": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*"
    ],
    "ec2:deleterouteserverendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server-endpoint/.*"
    ],
    "ec2:deleterouteserverpeer": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server-peer/.*"
    ],
    "ec2:deleteroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*"
    ],
    "ec2:deletesecondarynetwork": [
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-network/.*"
    ],
    "ec2:deletesecondarysubnet": [
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-subnet/.*"
    ],
    "ec2:deletesecuritygroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*"
    ],
    "ec2:deletesnapshot": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:deletesubnet": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:deletetags": [
      "arn:${Partition}:ec2:${Region}:${Account}:application-status-check/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-block/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-manager-data-export/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-cancellation-quote/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:carrier-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:customer-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:declarative-policies-report/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:dedicated-host/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:dhcp-options/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:egress-only-internet-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-gpu/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:export-image-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:export-instance-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:fpga-image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:host-reservation/.*",
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:image-usage-report/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:import-image-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:import-snapshot-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance-connect-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance-event-window/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*",
      "arn:${Partition}:ec2::${Account}:ipam/.*",
      "arn:${Partition}:ec2::${Account}:ipam-external-resource-verification-token/.*",
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*",
      "arn:${Partition}:ec2::${Account}:ipam-policy/.*",
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipam-pool-allocation/.*",
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/.*",
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver-target/.*",
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*",
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery-association/.*",
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv6pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:key-pair/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-virtual-interface-group-association/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-vpc-association/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-acl/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope-analysis/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-analysis/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-path/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:replace-root-volume-task/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:reserved-instances/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-server-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-server-peer/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-network/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group-rule/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:spot-fleet-request/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:spot-instances-request/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet-cidr-reservation/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter-rule/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-session/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-target/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-connect-peer/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table-announcement/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint-target/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-policy/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-trust-provider/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-block-public-access-exclusion/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-encryption-control/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-connection/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service-permission/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-flow-log/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-concentrator/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:deletetrafficmirrorfilter": [
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*"
    ],
    "ec2:deletetrafficmirrorfilterrule": [
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter-rule/.*"
    ],
    "ec2:deletetrafficmirrorsession": [
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-session/.*"
    ],
    "ec2:deletetrafficmirrortarget": [
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-target/.*"
    ],
    "ec2:deletetransitgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*"
    ],
    "ec2:deletetransitgatewayclientvpnattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:deletetransitgatewayconnect": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:deletetransitgatewayconnectpeer": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-connect-peer/.*"
    ],
    "ec2:deletetransitgatewaymeteringpolicy": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/.*"
    ],
    "ec2:deletetransitgatewaymeteringpolicyentry": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/.*"
    ],
    "ec2:deletetransitgatewaymulticastdomain": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:deletetransitgatewaypeeringattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:deletetransitgatewaypolicytable": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*"
    ],
    "ec2:deletetransitgatewaypolicytableentry": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*"
    ],
    "ec2:deletetransitgatewayprefixlistreference": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:deletetransitgatewayroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:deletetransitgatewayroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:deletetransitgatewayroutetableannouncement": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table-announcement/.*"
    ],
    "ec2:deletetransitgatewayvpcattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:deleteverifiedaccessendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/.*"
    ],
    "ec2:deleteverifiedaccessgroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*"
    ],
    "ec2:deleteverifiedaccessinstance": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:deleteverifiedaccesstrustprovider": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-trust-provider/.*"
    ],
    "ec2:deletevolume": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:deletevpc": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:deletevpcblockpublicaccessexclusion": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-block-public-access-exclusion/.*"
    ],
    "ec2:deletevpcencryptioncontrol": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-encryption-control/.*"
    ],
    "ec2:deletevpcendpointconnectionnotifications": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:deletevpcendpoints": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*"
    ],
    "ec2:deletevpcendpointserviceconfigurations": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:deletevpcpeeringconnection": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/.*"
    ],
    "ec2:deletevpnconcentrator": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-concentrator/.*"
    ],
    "ec2:deletevpnconnection": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:deletevpnconnectionroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:deletevpngateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:deprovisionipambyoasn": [
      "arn:${Partition}:ec2::${Account}:ipam/.*"
    ],
    "ec2:deprovisionipampoolcidr": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:deprovisionpublicipv4poolcidr": [
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*"
    ],
    "ec2:deregisterimage": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:deregistertransitgatewaymulticastgroupmembers": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:deregistertransitgatewaymulticastgroupsources": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:describecapacityblockextensionofferings": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:describeclientvpnauthorizationrules": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:describeclientvpnconnections": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:describeclientvpnroutes": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:describeclientvpntargetnetworks": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:describefleethistory": [
      "arn:${Partition}:ec2:${Region}:${Account}:fleet/.*"
    ],
    "ec2:describefleetinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:fleet/.*"
    ],
    "ec2:describefpgaimageattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:fpga-image/.*"
    ],
    "ec2:describeimageattribute": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:describeinstanceattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:describesecuritygroupreferences": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*"
    ],
    "ec2:describesnapshotattribute": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:describespotfleetinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:spot-fleet-request/.*"
    ],
    "ec2:describespotfleetrequesthistory": [
      "arn:${Partition}:ec2:${Region}:${Account}:spot-fleet-request/.*"
    ],
    "ec2:describevolumeattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:describevpcattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:describevpcendpointservicepermissions": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:detachappliancefromnatgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*"
    ],
    "ec2:detachclassiclinkvpc": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:detachimagewatermark": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:detachinternetgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:detachnetworkinterface": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:detachresourcesfromplacementgroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*"
    ],
    "ec2:detachverifiedaccesstrustprovider": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-trust-provider/.*"
    ],
    "ec2:detachvolume": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:detachvpngateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:disableaddresstransfer": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*"
    ],
    "ec2:disableapplicationstatuschecksuppression": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:disablefastlaunch": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:disablefastsnapshotrestores": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:disableimage": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:disableimagedeprecation": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:disableimagederegistrationprotection": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:disableinstancesqlhastandbydetections": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:disableipampolicy": [
      "arn:${Partition}:ec2::${Account}:ipam-policy/.*"
    ],
    "ec2:disablerouteserverpropagation": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*"
    ],
    "ec2:disabletransitgatewayroutetablepropagation": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table-announcement/.*"
    ],
    "ec2:disablevgwroutepropagation": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:disablevpcclassiclink": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:disablevpcclassiclinkdnssupport": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:disassociateaddress": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:disassociateapplicationstatuscheck": [
      "arn:${Partition}:ec2:${Region}:${Account}:application-status-check/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:disassociatecapacityreservationbillingowner": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:disassociateclientvpntargetnetwork": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:disassociateenclavecertificateiamrole": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*",
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "ec2:disassociateiaminstanceprofile": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:disassociateinstanceeventwindow": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance-event-window/.*"
    ],
    "ec2:disassociateipamresourcediscovery": [
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery-association/.*"
    ],
    "ec2:disassociatenatgatewayaddress": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:disassociaterouteserver": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:disassociateroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv6pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:disassociatesecuritygroupvpc": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:disassociatesubnetcidrblock": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:disassociatetransitgatewaymulticastdomain": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:disassociatetransitgatewaypolicytable": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*"
    ],
    "ec2:disassociatetransitgatewayroutetable": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:disassociateverifiedaccessinstancewebacl": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:disassociatevpccidrblock": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:enableaddresstransfer": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*"
    ],
    "ec2:enableapplicationstatuschecksuppression": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:enablefastlaunch": [
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*"
    ],
    "ec2:enablefastsnapshotrestores": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:enableimage": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:enableimagedeprecation": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:enableimagederegistrationprotection": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:enableinstancesqlhastandbydetections": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:enableipaminternetregistryassociation": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:enableipampolicy": [
      "arn:${Partition}:ec2::${Account}:ipam-policy/.*"
    ],
    "ec2:enablerouteserverpropagation": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*"
    ],
    "ec2:enabletransitgatewayroutetablepropagation": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table-announcement/.*"
    ],
    "ec2:enablevgwroutepropagation": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:enablevolumeio": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:enablevpcclassiclink": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:enablevpcclassiclinkdnssupport": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:exportclientvpnclientcertificaterevocationlist": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:exportclientvpnclientconfiguration": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:exportimage": [
      "arn:${Partition}:ec2:${Region}:${Account}:export-image-task/.*",
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:exportverifiedaccessinstanceclientconfiguration": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:getactivevpntunnelstatus": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:getassociatedenclavecertificateiamroles": [
      "arn:${Partition}:acm:${Region}:${Account}:certificate/.*"
    ],
    "ec2:getassociatedipv6poolcidrs": [
      "arn:${Partition}:ec2:${Region}:${Account}:ipv6pool-ec2/.*"
    ],
    "ec2:getcapacityreservationusage": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:getcoippoolusage": [
      "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/.*"
    ],
    "ec2:getconsoleoutput": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:getconsolescreenshot": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:getdeclarativepoliciesreportsummary": [
      "arn:${Partition}:ec2:${Region}:${Account}:declarative-policies-report/.*"
    ],
    "ec2:getflowlogsintegrationtemplate": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-flow-log/.*"
    ],
    "ec2:getgroupsforcapacityreservation": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:getimageancestry": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:getinstancetpmekpub": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:getinstanceuefidata": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:getipamaddresshistory": [
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*"
    ],
    "ec2:getipamdiscoveredaccounts": [
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*"
    ],
    "ec2:getipamdiscoveredpublicaddresses": [
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*"
    ],
    "ec2:getipamdiscoveredresourcecidrs": [
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*"
    ],
    "ec2:getipamdiscoveredroutes": [
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*"
    ],
    "ec2:getipaminternetregistryassociationasns": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:getipaminternetregistryassociationcidrs": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:getipampolicyallocationrules": [
      "arn:${Partition}:ec2::${Account}:ipam-policy/.*"
    ],
    "ec2:getipampolicyorganizationtargets": [
      "arn:${Partition}:ec2::${Account}:ipam-policy/.*"
    ],
    "ec2:getipampoolallocations": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:getipampoolcidrs": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:getipamprefixlistresolverrules": [
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/.*"
    ],
    "ec2:getipamprefixlistresolverversionentries": [
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/.*"
    ],
    "ec2:getipamprefixlistresolverversions": [
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/.*"
    ],
    "ec2:getipamresourcecidrs": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*"
    ],
    "ec2:getipamrouteoriginauthorizations": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:getipamrouteprotectionfindings": [
      "arn:${Partition}:ec2::${Account}:ipam/.*"
    ],
    "ec2:getipamroutingpolicyregistrationdeltas": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:getipamroutingpolicyregistrations": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:getlaunchtemplatedata": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:getmanagedprefixlistassociations": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*"
    ],
    "ec2:getmanagedprefixlistentries": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*"
    ],
    "ec2:getnetworkinsightsaccessscopeanalysisfindings": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope-analysis/.*"
    ],
    "ec2:getnetworkinsightsaccessscopecontent": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope/.*"
    ],
    "ec2:getpassworddata": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:getreservedinstancesexchangequote": [
      "arn:${Partition}:ec2:${Region}:${Account}:reserved-instances/.*"
    ],
    "ec2:getresourcepolicy": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*"
    ],
    "ec2:getrouteserverassociations": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*"
    ],
    "ec2:getrouteserverpropagations": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*"
    ],
    "ec2:getrouteserverroutingdatabase": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*"
    ],
    "ec2:getsecuritygroupsforvpc": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:gettransitgatewaymeteringpolicyentries": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/.*"
    ],
    "ec2:gettransitgatewaymulticastdomainassociations": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:gettransitgatewaypolicytableassociations": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*"
    ],
    "ec2:gettransitgatewaypolicytableentries": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*"
    ],
    "ec2:getverifiedaccessendpointpolicy": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/.*"
    ],
    "ec2:getverifiedaccessendpointtargets": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/.*"
    ],
    "ec2:getverifiedaccessgrouppolicy": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*"
    ],
    "ec2:getverifiedaccessinstancewebacl": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:getvpcresourcesblockingencryptionenforcement": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:getvpnconnectiondevicesampleconfiguration": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection-device-type/.*"
    ],
    "ec2:getvpntunnelreplacementstatus": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:importbyoipcidrtoipam": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:importclientvpnclientcertificaterevocationlist": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:importimage": [
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:import-image-task/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:importinstance": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:importkeypair": [
      "arn:${Partition}:ec2:${Region}:${Account}:key-pair/.*"
    ],
    "ec2:importsnapshot": [
      "arn:${Partition}:ec2:${Region}:${Account}:import-snapshot-task/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:importvolume": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:injectvolumeiolatency": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:locksnapshot": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:modifyaddressattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*"
    ],
    "ec2:modifyapplicationstatuscheck": [
      "arn:${Partition}:ec2:${Region}:${Account}:application-status-check/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:modifycapacityreservation": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:modifycapacityreservationfleet": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/.*"
    ],
    "ec2:modifyclientvpnendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:modifyfleet": [
      "arn:${Partition}:ec2:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:modifyfpgaimageattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:fpga-image/.*"
    ],
    "ec2:modifyhosts": [
      "arn:${Partition}:ec2:${Region}:${Account}:dedicated-host/.*"
    ],
    "ec2:modifyimageattribute": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:modifyinstanceattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:modifyinstancecapacityreservationattributes": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:modifyinstanceconnectendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance-connect-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*"
    ],
    "ec2:modifyinstancecpuoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:modifyinstancecreditspecification": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:modifyinstanceeventstarttime": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:modifyinstanceeventwindow": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance-event-window/.*"
    ],
    "ec2:modifyinstancemaintenanceoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:modifyinstancemetadataoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:modifyinstancenetworkperformanceoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:modifyinstanceplacement": [
      "arn:${Partition}:ec2:${Region}:${Account}:dedicated-host/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*"
    ],
    "ec2:modifyipam": [
      "arn:${Partition}:ec2::${Account}:ipam/.*"
    ],
    "ec2:modifyipampolicyallocationrules": [
      "arn:${Partition}:ec2::${Account}:ipam-policy/.*",
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:modifyipampool": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:modifyipampoolallocation": [
      "arn:${Partition}:ec2:${Region}:${Account}:ipam-pool-allocation/.*"
    ],
    "ec2:modifyipamprefixlistresolver": [
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/.*",
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*"
    ],
    "ec2:modifyipamprefixlistresolvertarget": [
      "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver-target/.*"
    ],
    "ec2:modifyipamresourcecidr": [
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*"
    ],
    "ec2:modifyipamresourcediscovery": [
      "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/.*"
    ],
    "ec2:modifyipamroutingpolicyregistration": [
      "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/.*"
    ],
    "ec2:modifyipamscope": [
      "arn:${Partition}:ec2::${Account}:ipam-scope/.*"
    ],
    "ec2:modifylaunchtemplate": [
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*"
    ],
    "ec2:modifylocalgatewayroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*"
    ],
    "ec2:modifymanagedprefixlist": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*"
    ],
    "ec2:modifynetworkinterfaceattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:modifyodbnetworkpeering": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:modifyprivatednsnameoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:modifypublicipdnsnameoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:modifyreservedinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:reserved-instances/.*"
    ],
    "ec2:modifyrouteserver": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-server/.*"
    ],
    "ec2:modifysecuritygrouprules": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group-rule/.*"
    ],
    "ec2:modifysnapshotattribute": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:modifysnapshottier": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:modifyspotfleetrequest": [
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:spot-fleet-request/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:modifysubnetattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:modifytrafficmirrorfilternetworkservices": [
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*"
    ],
    "ec2:modifytrafficmirrorfilterrule": [
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter-rule/.*"
    ],
    "ec2:modifytrafficmirrorsession": [
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-session/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-target/.*"
    ],
    "ec2:modifytransitgateway": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:modifytransitgatewaymeteringpolicy": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/.*"
    ],
    "ec2:modifytransitgatewaypolicytableentry": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:modifytransitgatewayprefixlistreference": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:modifytransitgatewayvpcattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:modifyverifiedaccessendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*"
    ],
    "ec2:modifyverifiedaccessendpointpolicy": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/.*"
    ],
    "ec2:modifyverifiedaccessgroup": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:modifyverifiedaccessgrouppolicy": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*"
    ],
    "ec2:modifyverifiedaccessinstance": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:modifyverifiedaccessinstanceloggingconfiguration": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "ec2:modifyverifiedaccesstrustprovider": [
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-trust-provider/.*"
    ],
    "ec2:modifyvolume": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:modifyvolumeattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:modifyvpcattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:modifyvpcblockpublicaccessexclusion": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-block-public-access-exclusion/.*"
    ],
    "ec2:modifyvpcencryptioncontrol": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-encryption-control/.*"
    ],
    "ec2:modifyvpcendpoint": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*"
    ],
    "ec2:modifyvpcendpointconnectionnotification": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:modifyvpcendpointpayerresponsibility": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:modifyvpcendpointserviceconfiguration": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:modifyvpcendpointservicepayerresponsibility": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:modifyvpcendpointservicepermissions": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:modifyvpcpeeringconnectionoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/.*"
    ],
    "ec2:modifyvpctenancy": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc/.*"
    ],
    "ec2:modifyvpnconnection": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:modifyvpnconnectionoptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:modifyvpntunnelcertificate": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:modifyvpntunneloptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:monitorinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:movebyoipcidrtoipam": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:movecapacityreservationinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:pausevolumeio": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:provisionipambyoasn": [
      "arn:${Partition}:ec2::${Account}:ipam/.*"
    ],
    "ec2:provisionipampoolcidr": [
      "arn:${Partition}:ec2::${Account}:ipam-external-resource-verification-token/.*",
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:provisionpublicipv4poolcidr": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*"
    ],
    "ec2:purchasecapacityblock": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:purchasecapacityblockextension": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:purchasehostreservation": [
      "arn:${Partition}:ec2:${Region}:${Account}:dedicated-host/.*"
    ],
    "ec2:putresourcepolicy": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/.*"
    ],
    "ec2:rebootinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:registerimage": [
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:registertransitgatewaymulticastgroupmembers": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:registertransitgatewaymulticastgroupsources": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:rejectcapacityreservationbillingownership": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:rejecttransitgatewayclientvpnattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:rejecttransitgatewaymulticastdomainassociations": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:rejecttransitgatewaypeeringattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:rejecttransitgatewayvpcattachment": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*"
    ],
    "ec2:rejectvpcendpointconnections": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:rejectvpcpeeringconnection": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/.*"
    ],
    "ec2:releaseaddress": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*"
    ],
    "ec2:releasehosts": [
      "arn:${Partition}:ec2:${Region}:${Account}:dedicated-host/.*"
    ],
    "ec2:releaseipampoolallocation": [
      "arn:${Partition}:ec2::${Account}:ipam-pool/.*"
    ],
    "ec2:replaceiaminstanceprofileassociation": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:replacenetworkaclassociation": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-acl/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:replacenetworkaclentry": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-acl/.*"
    ],
    "ec2:replaceroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*"
    ],
    "ec2:replaceroutetableassociation": [
      "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:ipv6pool-ec2/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:route-table/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/.*"
    ],
    "ec2:replacetransitgatewayroute": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:replacevpntunnel": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/.*"
    ],
    "ec2:reportinstancestatus": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:requestspotfleet": [
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:key-pair/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:spot-fleet-request/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:requestspotinstances": [
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:key-pair/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:spot-instances-request/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*"
    ],
    "ec2:resetaddressattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/.*"
    ],
    "ec2:resetfpgaimageattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:fpga-image/.*"
    ],
    "ec2:resetimageattribute": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:resetinstanceattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:resetnetworkinterfaceattribute": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:resetsnapshotattribute": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:restoreimagefromrecyclebin": [
      "arn:${Partition}:ec2:${Region}::image/.*"
    ],
    "ec2:restoremanagedprefixlistversion": [
      "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/.*"
    ],
    "ec2:restoresnapshotfromrecyclebin": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:restoresnapshottier": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:restorevolumefromrecyclebin": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:revokeclientvpningress": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:revokesecuritygroupegress": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*"
    ],
    "ec2:revokesecuritygroupingress": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*"
    ],
    "ec2:runinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:elastic-gpu/.*",
      "arn:${Partition}:elastic-inference:${Region}:${Account}:elastic-inference-accelerator/.*",
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*",
      "arn:${Partition}:ec2:${Region}::image/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:key-pair/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:launch-template/.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:placement-group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-interface/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:secondary-subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*",
      "arn:${Partition}:ec2:${Region}::snapshot/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:spot-instances-request/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:subnet/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "ec2:searchlocalgatewayroutes": [
      "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/.*"
    ],
    "ec2:searchtransitgatewaymulticastgroups": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/.*"
    ],
    "ec2:searchtransitgatewayroutes": [
      "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/.*"
    ],
    "ec2:senddiagnosticinterrupt": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:sendspotinstanceinterruptions": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:startinstances": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*"
    ],
    "ec2:startnetworkinsightsaccessscopeanalysis": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope-analysis/.*"
    ],
    "ec2:startnetworkinsightsanalysis": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-analysis/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:network-insights-path/.*"
    ],
    "ec2:startvpcendpointserviceprivatednsverification": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "ec2:stopinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:terminateclientvpnconnections": [
      "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/.*"
    ],
    "ec2:terminateinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:unassignipv6addresses": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:unassignprivateipaddresses": [
      "arn:${Partition}:ec2:${Region}:${Account}:network-interface/.*"
    ],
    "ec2:unassignprivatenatgatewayaddress": [
      "arn:${Partition}:ec2:${Region}:${Account}:natgateway/.*"
    ],
    "ec2:unlocksnapshot": [
      "arn:${Partition}:ec2:${Region}::snapshot/.*"
    ],
    "ec2:unmonitorinstances": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*"
    ],
    "ec2:updateinterruptiblecapacityreservationallocation": [
      "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/.*"
    ],
    "ec2:updatesecuritygroupruledescriptionsegress": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*"
    ],
    "ec2:updatesecuritygroupruledescriptionsingress": [
      "arn:${Partition}:ec2:${Region}:${Account}:security-group/.*"
    ],
    "ecr-public:batchchecklayeravailability": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:batchdeleteimage": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:completelayerupload": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:createrepository": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:deleterepository": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:deleterepositorypolicy": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:describeimages": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:describeimagetags": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:describeregistries": [
      "arn:${Partition}:ecr-public::${Account}:registry/.*"
    ],
    "ecr-public:describerepositories": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:getregistrycatalogdata": [
      "arn:${Partition}:ecr-public::${Account}:registry/.*"
    ],
    "ecr-public:getrepositorycatalogdata": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:getrepositorypolicy": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:initiatelayerupload": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:listtagsforresource": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:putimage": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:putregistrycatalogdata": [
      "arn:${Partition}:ecr-public::${Account}:registry/.*"
    ],
    "ecr-public:putrepositorycatalogdata": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:setrepositorypolicy": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:tagresource": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:untagresource": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr-public:uploadlayerpart": [
      "arn:${Partition}:ecr-public::${Account}:repository/.*"
    ],
    "ecr:batchchecklayeravailability": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:batchdeleteimage": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:batchgetimage": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:batchgetrepositoryscanningconfiguration": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:batchimportupstreamimage": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:completelayerupload": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:createrepository": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:deletelifecyclepolicy": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:deleterepository": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:deleterepositorypolicy": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:describeimagereplicationstatus": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:describeimages": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:describeimagescanfindings": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:describeimagesigningstatus": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:describerepositories": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:getdownloadurlforlayer": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:getimagecopystatus": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:getlifecyclepolicy": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:getlifecyclepolicypreview": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:getrepositorypolicy": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:initiatelayerupload": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:listimages": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:listtagsforresource": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:putimage": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:putimagescanningconfiguration": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:putimagetagmutability": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:putlifecyclepolicy": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:replicateimage": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:setrepositorypolicy": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:startimagescan": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:startlifecyclepolicypreview": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:tagresource": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:untagresource": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:updateimagestorageclass": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecr:uploadlayerpart": [
      "arn:${Partition}:ecr:${Region}:${Account}:repository/.*"
    ],
    "ecs:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:continueservicedeployment": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:service-deployment/.*"
    ],
    "ecs:createcapacityprovider": [
      "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/.*"
    ],
    "ecs:createcluster": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:createdaemon": [
      "arn:${Partition}:ecs:${Region}:${Account}:daemon/.*"
    ],
    "ecs:createexpressgatewayservice": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:createservice": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:createtaskset": [
      "arn:${Partition}:ecs:${Region}:${Account}:task-set/.*"
    ],
    "ecs:deleteattributes": [
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*"
    ],
    "ecs:deletecapacityprovider": [
      "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/.*"
    ],
    "ecs:deletecluster": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:deletedaemon": [
      "arn:${Partition}:ecs:${Region}:${Account}:daemon/.*"
    ],
    "ecs:deletedaemontaskdefinition": [
      "arn:${Partition}:ecs:${Region}:${Account}:.*"
    ],
    "ecs:deleteexpressgatewayservice": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:deleteservice": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:deletetaskdefinitions": [
      "arn:${Partition}:ecs:${Region}:${Account}:.*"
    ],
    "ecs:deletetaskset": [
      "arn:${Partition}:ecs:${Region}:${Account}:task-set/.*"
    ],
    "ecs:deregistercontainerinstance": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:describecapacityproviders": [
      "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/.*"
    ],
    "ecs:describeclusters": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:describecontainerinstances": [
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*"
    ],
    "ecs:describedaemon": [
      "arn:${Partition}:ecs:${Region}:${Account}:daemon/.*"
    ],
    "ecs:describedaemondeployments": [
      "arn:${Partition}:ecs:${Region}:${Account}:daemon/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:daemon-deployment/.*"
    ],
    "ecs:describedaemonrevisions": [
      "arn:${Partition}:ecs:${Region}:${Account}:daemon/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:daemon-revision/.*"
    ],
    "ecs:describedaemontaskdefinition": [
      "arn:${Partition}:ecs:${Region}:${Account}:.*"
    ],
    "ecs:describeexpressgatewayservice": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:describeservicedeployments": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:service-deployment/.*"
    ],
    "ecs:describeservicerevisions": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:service-revision/.*"
    ],
    "ecs:describeservices": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:describetasks": [
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*"
    ],
    "ecs:describetasksets": [
      "arn:${Partition}:ecs:${Region}:${Account}:task-set/.*"
    ],
    "ecs:executecommand": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*"
    ],
    "ecs:gettaskprotection": [
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*"
    ],
    "ecs:listattributes": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:listcontainerinstances": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:listdaemondeployments": [
      "arn:${Partition}:ecs:${Region}:${Account}:daemon/.*"
    ],
    "ecs:listservicedeployments": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:listtagsforresource": [
      "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task-set/.*"
    ],
    "ecs:listtasks": [
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*"
    ],
    "ecs:poll": [
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*"
    ],
    "ecs:putattributes": [
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*"
    ],
    "ecs:putclustercapacityproviders": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:putsystemlogevents": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*"
    ],
    "ecs:registercontainerinstance": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:registerdaemontaskdefinition": [
      "arn:${Partition}:ecs:${Region}:${Account}:.*"
    ],
    "ecs:registertaskdefinition": [
      "arn:${Partition}:ecs:${Region}:${Account}:.*"
    ],
    "ecs:runtask": [
      "arn:${Partition}:ecs:${Region}:${Account}:.*"
    ],
    "ecs:starttask": [
      "arn:${Partition}:ecs:${Region}:${Account}:.*"
    ],
    "ecs:starttelemetrysession": [
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*"
    ],
    "ecs:stopservicedeployment": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:service-deployment/.*"
    ],
    "ecs:stoptask": [
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*"
    ],
    "ecs:submitattachmentstatechanges": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:submitcontainerstatechange": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:submittaskstatechange": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:tagresource": [
      "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:daemon/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:.*",
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task-set/.*"
    ],
    "ecs:untagresource": [
      "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:daemon/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:.*",
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task-set/.*"
    ],
    "ecs:updatecapacityprovider": [
      "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/.*"
    ],
    "ecs:updatecluster": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:updateclustersettings": [
      "arn:${Partition}:ecs:${Region}:${Account}:cluster/.*"
    ],
    "ecs:updatecontaineragent": [
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*"
    ],
    "ecs:updatecontainerinstancesstate": [
      "arn:${Partition}:ecs:${Region}:${Account}:container-instance/.*"
    ],
    "ecs:updatedaemon": [
      "arn:${Partition}:ecs:${Region}:${Account}:daemon/.*"
    ],
    "ecs:updateexpressgatewayservice": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:updateservice": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:updateserviceprimarytaskset": [
      "arn:${Partition}:ecs:${Region}:${Account}:service/.*"
    ],
    "ecs:updatetaskprotection": [
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*"
    ],
    "ecs:updatetaskset": [
      "arn:${Partition}:ecs:${Region}:${Account}:task-set/.*"
    ],
    "eks-auth:assumeroleforpodidentity": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:accesskubernetesapi": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:activatecertificateauthority": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:associateaccesspolicy": [
      "arn:${Partition}:eks:${Region}:${Account}:access-entry/.*"
    ],
    "eks:associateencryptionconfig": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:associateidentityproviderconfig": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:cancelupdate": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:createaccessentry": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:createaddon": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:eks:${Region}:${Account}:podidentityassociation/.*"
    ],
    "eks:createcapability": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:createcertificateauthority": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:createfargateprofile": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:createnodegroup": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:createpodidentityassociation": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:deleteaccessentry": [
      "arn:${Partition}:eks:${Region}:${Account}:access-entry/.*"
    ],
    "eks:deleteaddon": [
      "arn:${Partition}:eks:${Region}:${Account}:addon/.*",
      "arn:${Partition}:eks:${Region}:${Account}:podidentityassociation/.*"
    ],
    "eks:deletecapability": [
      "arn:${Partition}:eks:${Region}:${Account}:capability/.*"
    ],
    "eks:deletecertificateauthority": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:deletecluster": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:deleteeksanywheresubscription": [
      "arn:${Partition}:eks:${Region}:${Account}:eks-anywhere-subscription/.*"
    ],
    "eks:deletefargateprofile": [
      "arn:${Partition}:eks:${Region}:${Account}:fargateprofile/.*"
    ],
    "eks:deletenodegroup": [
      "arn:${Partition}:eks:${Region}:${Account}:nodegroup/.*"
    ],
    "eks:deletepodidentityassociation": [
      "arn:${Partition}:eks:${Region}:${Account}:podidentityassociation/.*"
    ],
    "eks:deregistercluster": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:describeaccessentry": [
      "arn:${Partition}:eks:${Region}:${Account}:access-entry/.*"
    ],
    "eks:describeaddon": [
      "arn:${Partition}:eks:${Region}:${Account}:addon/.*"
    ],
    "eks:describecapability": [
      "arn:${Partition}:eks:${Region}:${Account}:capability/.*"
    ],
    "eks:describecertificateauthority": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:describecluster": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:describeeksanywheresubscription": [
      "arn:${Partition}:eks:${Region}:${Account}:eks-anywhere-subscription/.*"
    ],
    "eks:describefargateprofile": [
      "arn:${Partition}:eks:${Region}:${Account}:fargateprofile/.*"
    ],
    "eks:describeidentityproviderconfig": [
      "arn:${Partition}:eks:${Region}:${Account}:identityproviderconfig/.*"
    ],
    "eks:describeinsight": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:describeinsightsrefresh": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:describenodegroup": [
      "arn:${Partition}:eks:${Region}:${Account}:nodegroup/.*"
    ],
    "eks:describepodidentityassociation": [
      "arn:${Partition}:eks:${Region}:${Account}:podidentityassociation/.*"
    ],
    "eks:describeupdate": [
      "arn:${Partition}:eks:${Region}:${Account}:addon/.*",
      "arn:${Partition}:eks:${Region}:${Account}:capability/.*",
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:eks:${Region}:${Account}:nodegroup/.*"
    ],
    "eks:disassociateaccesspolicy": [
      "arn:${Partition}:eks:${Region}:${Account}:access-entry/.*"
    ],
    "eks:disassociateidentityproviderconfig": [
      "arn:${Partition}:eks:${Region}:${Account}:identityproviderconfig/.*"
    ],
    "eks:listaccessentries": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:listaddons": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:listassociatedaccesspolicies": [
      "arn:${Partition}:eks:${Region}:${Account}:access-entry/.*"
    ],
    "eks:listcapabilities": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:listcertificateauthorities": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:listdashboarddata": [
      "arn:${Partition}:eks:${Region}:${Account}:dashboard/.*"
    ],
    "eks:listdashboardresources": [
      "arn:${Partition}:eks:${Region}:${Account}:dashboard/.*"
    ],
    "eks:listfargateprofiles": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:listidentityproviderconfigs": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:listinsights": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:listnodegroups": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:listpodidentityassociations": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:listtagsforresource": [
      "arn:${Partition}:eks:${Region}:${Account}:addon/.*",
      "arn:${Partition}:eks:${Region}:${Account}:capability/.*",
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:eks:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:eks:${Region}:${Account}:eks-anywhere-subscription/.*",
      "arn:${Partition}:eks:${Region}:${Account}:fargateprofile/.*",
      "arn:${Partition}:eks:${Region}:${Account}:identityproviderconfig/.*",
      "arn:${Partition}:eks:${Region}:${Account}:nodegroup/.*"
    ],
    "eks:listupdates": [
      "arn:${Partition}:eks:${Region}:${Account}:addon/.*",
      "arn:${Partition}:eks:${Region}:${Account}:capability/.*",
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:eks:${Region}:${Account}:nodegroup/.*"
    ],
    "eks:mutateviakubernetesapi": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:startinsightsrefresh": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:tagresource": [
      "arn:${Partition}:eks:${Region}:${Account}:access-entry/.*",
      "arn:${Partition}:eks:${Region}:${Account}:addon/.*",
      "arn:${Partition}:eks:${Region}:${Account}:capability/.*",
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:eks:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:eks:${Region}:${Account}:eks-anywhere-subscription/.*",
      "arn:${Partition}:eks:${Region}:${Account}:fargateprofile/.*",
      "arn:${Partition}:eks:${Region}:${Account}:identityproviderconfig/.*",
      "arn:${Partition}:eks:${Region}:${Account}:nodegroup/.*",
      "arn:${Partition}:eks:${Region}:${Account}:podidentityassociation/.*"
    ],
    "eks:untagresource": [
      "arn:${Partition}:eks:${Region}:${Account}:access-entry/.*",
      "arn:${Partition}:eks:${Region}:${Account}:addon/.*",
      "arn:${Partition}:eks:${Region}:${Account}:capability/.*",
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:eks:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:eks:${Region}:${Account}:eks-anywhere-subscription/.*",
      "arn:${Partition}:eks:${Region}:${Account}:fargateprofile/.*",
      "arn:${Partition}:eks:${Region}:${Account}:identityproviderconfig/.*",
      "arn:${Partition}:eks:${Region}:${Account}:nodegroup/.*",
      "arn:${Partition}:eks:${Region}:${Account}:podidentityassociation/.*"
    ],
    "eks:updateaccessentry": [
      "arn:${Partition}:eks:${Region}:${Account}:access-entry/.*"
    ],
    "eks:updateaddon": [
      "arn:${Partition}:eks:${Region}:${Account}:addon/.*",
      "arn:${Partition}:eks:${Region}:${Account}:podidentityassociation/.*"
    ],
    "eks:updatecapability": [
      "arn:${Partition}:eks:${Region}:${Account}:capability/.*"
    ],
    "eks:updateclusterconfig": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:updateclusterversion": [
      "arn:${Partition}:eks:${Region}:${Account}:cluster/.*"
    ],
    "eks:updateeksanywheresubscription": [
      "arn:${Partition}:eks:${Region}:${Account}:eks-anywhere-subscription/.*"
    ],
    "eks:updatenodegroupconfig": [
      "arn:${Partition}:eks:${Region}:${Account}:nodegroup/.*"
    ],
    "eks:updatenodegroupversion": [
      "arn:${Partition}:eks:${Region}:${Account}:nodegroup/.*"
    ],
    "eks:updatepodidentityassociation": [
      "arn:${Partition}:eks:${Region}:${Account}:podidentityassociation/.*"
    ],
    "elasticache:addtagstoresource": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:reserved-instance:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:subnetgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:authorizecachesecuritygroupingress": [
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*"
    ],
    "elasticache:batchapplyupdateaction": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:batchstopupdateaction": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:completemigration": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:connect": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*"
    ],
    "elasticache:copyserverlesscachesnapshot": [
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*"
    ],
    "elasticache:copysnapshot": [
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*"
    ],
    "elasticache:createcachecluster": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:subnetgroup:.*"
    ],
    "elasticache:createcacheparametergroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*"
    ],
    "elasticache:createcachesecuritygroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*"
    ],
    "elasticache:createcachesubnetgroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:subnetgroup:.*"
    ],
    "elasticache:createglobalreplicationgroup": [
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:createreplicationgroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:subnetgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:createserverlesscache": [
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:createserverlesscachesnapshot": [
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*"
    ],
    "elasticache:createsnapshot": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*"
    ],
    "elasticache:createuser": [
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*"
    ],
    "elasticache:createusergroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:decreasenodegroupsinglobalreplicationgroup": [
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*"
    ],
    "elasticache:decreasereplicacount": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:deletecachecluster": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*"
    ],
    "elasticache:deletecacheparametergroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*"
    ],
    "elasticache:deletecachesecuritygroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*"
    ],
    "elasticache:deletecachesubnetgroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:subnetgroup:.*"
    ],
    "elasticache:deleteglobalreplicationgroup": [
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*"
    ],
    "elasticache:deletereplicationgroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*"
    ],
    "elasticache:deleteserverlesscache": [
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*"
    ],
    "elasticache:deleteserverlesscachesnapshot": [
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*"
    ],
    "elasticache:deletesnapshot": [
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*"
    ],
    "elasticache:deleteuser": [
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*"
    ],
    "elasticache:deleteusergroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:describecacheclusters": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*"
    ],
    "elasticache:describecacheparametergroups": [
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*"
    ],
    "elasticache:describecacheparameters": [
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*"
    ],
    "elasticache:describecachesecuritygroups": [
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*"
    ],
    "elasticache:describecachesubnetgroups": [
      "arn:${Partition}:elasticache:${Region}:${Account}:subnetgroup:.*"
    ],
    "elasticache:describeglobalreplicationgroups": [
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*"
    ],
    "elasticache:describereplicationgroups": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:describereservedcachenodes": [
      "arn:${Partition}:elasticache:${Region}:${Account}:reserved-instance:.*"
    ],
    "elasticache:describeserverlesscaches": [
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*"
    ],
    "elasticache:describeserverlesscachesnapshots": [
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*"
    ],
    "elasticache:describesnapshots": [
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*"
    ],
    "elasticache:describeupdateactions": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:describeusergroups": [
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:describeusers": [
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*"
    ],
    "elasticache:disassociateglobalreplicationgroup": [
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*"
    ],
    "elasticache:exportserverlesscachesnapshot": [
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*"
    ],
    "elasticache:failoverglobalreplicationgroup": [
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*"
    ],
    "elasticache:increasenodegroupsinglobalreplicationgroup": [
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*"
    ],
    "elasticache:increasereplicacount": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:interruptclusterazpower": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:listallowednodetypemodifications": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:listtagsforresource": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:reserved-instance:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:subnetgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:modifycachecluster": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*"
    ],
    "elasticache:modifycacheparametergroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*"
    ],
    "elasticache:modifycachesubnetgroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:subnetgroup:.*"
    ],
    "elasticache:modifyglobalreplicationgroup": [
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*"
    ],
    "elasticache:modifyreplicationgroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:modifyreplicationgroupshardconfiguration": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:modifyserverlesscache": [
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:modifyuser": [
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*"
    ],
    "elasticache:modifyusergroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:purchasereservedcachenodesoffering": [
      "arn:${Partition}:elasticache:${Region}:${Account}:reserved-instance:.*"
    ],
    "elasticache:rebalanceslotsinglobalreplicationgroup": [
      "arn:${Partition}:elasticache::${Account}:globalreplicationgroup:.*"
    ],
    "elasticache:rebootcachecluster": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*"
    ],
    "elasticache:removetagsfromresource": [
      "arn:${Partition}:elasticache:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:reserved-instance:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscache:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:serverlesscachesnapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:subnetgroup:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:user:.*",
      "arn:${Partition}:elasticache:${Region}:${Account}:usergroup:.*"
    ],
    "elasticache:resetcacheparametergroup": [
      "arn:${Partition}:elasticache:${Region}:${Account}:parametergroup:.*"
    ],
    "elasticache:revokecachesecuritygroupingress": [
      "arn:${Partition}:elasticache:${Region}:${Account}:securitygroup:.*"
    ],
    "elasticache:startmigration": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:testfailover": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticache:testmigration": [
      "arn:${Partition}:elasticache:${Region}:${Account}:replicationgroup:.*"
    ],
    "elasticbeanstalk:abortenvironmentupdate": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:addtags": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}::platform/.*"
    ],
    "elasticbeanstalk:applyenvironmentmanagedaction": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:associateenvironmentoperationsrole": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:composeenvironments": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*"
    ],
    "elasticbeanstalk:createapplication": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*"
    ],
    "elasticbeanstalk:createapplicationversion": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*"
    ],
    "elasticbeanstalk:createconfigurationtemplate": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*"
    ],
    "elasticbeanstalk:createenvironment": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:createplatformversion": [
      "arn:${Partition}:elasticbeanstalk:${Region}::platform/.*"
    ],
    "elasticbeanstalk:deleteapplication": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*"
    ],
    "elasticbeanstalk:deleteapplicationversion": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*"
    ],
    "elasticbeanstalk:deleteconfigurationtemplate": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*"
    ],
    "elasticbeanstalk:deleteenvironmentconfiguration": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:deleteplatformversion": [
      "arn:${Partition}:elasticbeanstalk:${Region}::platform/.*"
    ],
    "elasticbeanstalk:describeapplications": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*"
    ],
    "elasticbeanstalk:describeapplicationversions": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*"
    ],
    "elasticbeanstalk:describeconfigurationoptions": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}::solutionstack/.*"
    ],
    "elasticbeanstalk:describeconfigurationsettings": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:describeenvironmenthealth": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:describeenvironmentmanagedactionhistory": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:describeenvironmentmanagedactions": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:describeenvironmentresources": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:describeenvironments": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:describeevents": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:describeinstanceshealth": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:describeplatformversion": [
      "arn:${Partition}:elasticbeanstalk:${Region}::platform/.*"
    ],
    "elasticbeanstalk:disassociateenvironmentoperationsrole": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:listavailablesolutionstacks": [
      "arn:${Partition}:elasticbeanstalk:${Region}::solutionstack/.*"
    ],
    "elasticbeanstalk:listplatformversions": [
      "arn:${Partition}:elasticbeanstalk:${Region}::platform/.*"
    ],
    "elasticbeanstalk:listtagsforresource": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}::platform/.*"
    ],
    "elasticbeanstalk:putinstancestatistics": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:rebuildenvironment": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:removetags": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}::platform/.*"
    ],
    "elasticbeanstalk:requestenvironmentinfo": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:restartappserver": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:retrieveenvironmentinfo": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:swapenvironmentcnames": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:terminateenvironment": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:updateapplication": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*"
    ],
    "elasticbeanstalk:updateapplicationresourcelifecycle": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*"
    ],
    "elasticbeanstalk:updateapplicationversion": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*"
    ],
    "elasticbeanstalk:updateconfigurationtemplate": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*"
    ],
    "elasticbeanstalk:updateenvironment": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticbeanstalk:updatetagsforresource": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}::platform/.*"
    ],
    "elasticbeanstalk:validateconfigurationsettings": [
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/.*",
      "arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/.*"
    ],
    "elasticfilesystem:backup": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:clientmount": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:clientrootaccess": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:clientwrite": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:createaccesspoint": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:createmounttarget": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:createreplicationconfiguration": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:createtags": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:deleteaccesspoint": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:access-point/.*"
    ],
    "elasticfilesystem:deletefilesystem": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:deletefilesystempolicy": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:deletemounttarget": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:deletereplicationconfiguration": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:deletetags": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:describeaccesspoints": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:access-point/.*",
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:describebackuppolicy": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:describefilesystempolicy": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:describefilesystems": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:describelifecycleconfiguration": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:describemounttargets": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:access-point/.*",
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:describemounttargetsecuritygroups": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:describereplicationconfigurations": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:describetags": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:listtagsforresource": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:access-point/.*",
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:modifymounttargetsecuritygroups": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:putbackuppolicy": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:putfilesystempolicy": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:putlifecycleconfiguration": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:replicationread": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:replicationwrite": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:restore": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:tagresource": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:access-point/.*",
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:untagresource": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:access-point/.*",
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:updatefilesystem": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticfilesystem:updatefilesystemprotection": [
      "arn:${Partition}:elasticfilesystem:${Region}:${Account}:file-system/.*"
    ],
    "elasticloadbalancing:addlistenercertificates": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/.*"
    ],
    "elasticloadbalancing:addtags": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/net/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:addtruststorerevocations": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:applysecuritygroupstoloadbalancer": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:attachloadbalancertosubnets": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:configurehealthcheck": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:createappcookiestickinesspolicy": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:createlbcookiestickinesspolicy": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:createlistener": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "elasticloadbalancing:createloadbalancer": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "elasticloadbalancing:createloadbalancerlisteners": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:createloadbalancerpolicy": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:createrule": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/.*"
    ],
    "elasticloadbalancing:createtargetgroup": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/.*"
    ],
    "elasticloadbalancing:createtruststore": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:createwebaclassociation": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*"
    ],
    "elasticloadbalancing:deletelistener": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/.*"
    ],
    "elasticloadbalancing:deleteloadbalancer": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "elasticloadbalancing:deleteloadbalancerlisteners": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:deleteloadbalancerpolicy": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:deleterule": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/net/.*"
    ],
    "elasticloadbalancing:deletesharedtruststoreassociation": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:deletetargetgroup": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/.*"
    ],
    "elasticloadbalancing:deletetruststore": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:deletewebaclassociation": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*"
    ],
    "elasticloadbalancing:deregisterinstancesfromloadbalancer": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:deregistertargets": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/.*"
    ],
    "elasticloadbalancing:detachloadbalancerfromsubnets": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:disableavailabilityzonesforloadbalancer": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:enableavailabilityzonesforloadbalancer": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:getloadbalancerwebacl": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*"
    ],
    "elasticloadbalancing:getresourcepolicy": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:gettruststorecacertificatesbundle": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:gettruststorerevocationcontent": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:modifycapacityreservation": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "elasticloadbalancing:modifyippools": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*"
    ],
    "elasticloadbalancing:modifylistener": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/.*"
    ],
    "elasticloadbalancing:modifylistenerattributes": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/.*"
    ],
    "elasticloadbalancing:modifyloadbalancerattributes": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "elasticloadbalancing:modifyrule": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/net/.*"
    ],
    "elasticloadbalancing:modifytargetgroup": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/.*"
    ],
    "elasticloadbalancing:modifytargetgroupattributes": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/.*"
    ],
    "elasticloadbalancing:modifytruststore": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:registerinstanceswithloadbalancer": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:registertargets": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/.*"
    ],
    "elasticloadbalancing:removelistenercertificates": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/.*"
    ],
    "elasticloadbalancing:removetags": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/net/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener/net/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:targetgroup/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:removetruststorerevocations": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:truststore/.*"
    ],
    "elasticloadbalancing:setipaddresstype": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "elasticloadbalancing:setloadbalancerlistenersslcertificate": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:setloadbalancerpoliciesforbackendserver": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:setloadbalancerpoliciesoflistener": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/.*"
    ],
    "elasticloadbalancing:setrulepriorities": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:listener-rule/net/.*"
    ],
    "elasticloadbalancing:setsecuritygroups": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "elasticloadbalancing:setsubnets": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/gwy/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/net/.*"
    ],
    "elasticmapreduce:accessalleventlogs": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:addinstancefleet": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:addinstancegroups": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:addjobflowsteps": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:addtags": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*",
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:notebook-execution/.*",
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elasticmapreduce:attacheditor": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:cancelsteps": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:createeditor": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:createpersistentappui": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:createstudiopresignedurl": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elasticmapreduce:createstudiosessionmapping": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elasticmapreduce:deleteeditor": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:deletestudio": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elasticmapreduce:deletestudiosessionmapping": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elasticmapreduce:deleteworkspaceaccess": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:describecluster": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:describeeditor": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:describejobflows": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:describenotebookexecution": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:notebook-execution/.*"
    ],
    "elasticmapreduce:describepersistentappui": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:describestep": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:describestudio": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elasticmapreduce:detacheditor": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:getautoterminationpolicy": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:getclustersessioncredentials": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:getmanagedscalingpolicy": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:getonclusterappuipresignedurl": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:getpersistentappuipresignedurl": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:getsession": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:getsessionendpoint": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:getstudiosessionmapping": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elasticmapreduce:listbootstrapactions": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:listinstancefleets": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:listinstancegroups": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:listinstances": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:listsessions": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:liststeps": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:listworkspaceaccessidentities": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:modifycluster": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:modifyinstancefleet": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:modifyinstancegroups": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:openeditorinconsole": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:putautoscalingpolicy": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:putautoterminationpolicy": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:putmanagedscalingpolicy": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:putworkspaceaccess": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:removeautoscalingpolicy": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:removeautoterminationpolicy": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:removemanagedscalingpolicy": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:removetags": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*",
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:notebook-execution/.*",
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elasticmapreduce:setkeepjobflowalivewhennosteps": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:setterminationprotection": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:setunhealthynodereplacement": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:setvisibletoallusers": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:starteditor": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:startnotebookexecution": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:startsession": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:stopeditor": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:stopnotebookexecution": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:notebook-execution/.*"
    ],
    "elasticmapreduce:terminatejobflows": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:terminatesession": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:cluster/.*"
    ],
    "elasticmapreduce:updateeditor": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:editor/.*"
    ],
    "elasticmapreduce:updatestudio": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elasticmapreduce:updatestudiosessionmapping": [
      "arn:${Partition}:elasticmapreduce:${Region}:${Account}:studio/.*"
    ],
    "elastictranscoder:canceljob": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:job/.*"
    ],
    "elastictranscoder:createjob": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:pipeline/.*",
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:preset/.*"
    ],
    "elastictranscoder:deletepipeline": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:pipeline/.*"
    ],
    "elastictranscoder:deletepreset": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:preset/.*"
    ],
    "elastictranscoder:listjobsbypipeline": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:pipeline/.*"
    ],
    "elastictranscoder:readjob": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:job/.*"
    ],
    "elastictranscoder:readpipeline": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:pipeline/.*"
    ],
    "elastictranscoder:readpreset": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:preset/.*"
    ],
    "elastictranscoder:updatepipeline": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:pipeline/.*"
    ],
    "elastictranscoder:updatepipelinenotifications": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:pipeline/.*"
    ],
    "elastictranscoder:updatepipelinestatus": [
      "arn:${Partition}:elastictranscoder:${Region}:${Account}:pipeline/.*"
    ],
    "elemental-appliances-software:createquote": [
      "arn:${Partition}:elemental-appliances-software:${Region}:${Account}:quote/.*"
    ],
    "elemental-appliances-software:getquote": [
      "arn:${Partition}:elemental-appliances-software:${Region}:${Account}:quote/.*"
    ],
    "elemental-appliances-software:updatequote": [
      "arn:${Partition}:elemental-appliances-software:${Region}:${Account}:quote/.*"
    ],
    "elemental-inference:associatefeed": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:feed/.*"
    ],
    "elemental-inference:deletedictionary": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:dictionary/.*"
    ],
    "elemental-inference:deletefeed": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:feed/.*"
    ],
    "elemental-inference:disassociatefeed": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:feed/.*"
    ],
    "elemental-inference:exportdictionaryentries": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:dictionary/.*"
    ],
    "elemental-inference:getdictionary": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:dictionary/.*"
    ],
    "elemental-inference:getfeed": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:feed/.*"
    ],
    "elemental-inference:getmetadata": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:feed/.*"
    ],
    "elemental-inference:putmedia": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:feed/.*"
    ],
    "elemental-inference:tagresource": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:dictionary/.*",
      "arn:${Partition}:elemental-inference:${Region}:${Account}:feed/.*"
    ],
    "elemental-inference:untagresource": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:dictionary/.*",
      "arn:${Partition}:elemental-inference:${Region}:${Account}:feed/.*"
    ],
    "elemental-inference:updatedictionary": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:dictionary/.*"
    ],
    "elemental-inference:updatefeed": [
      "arn:${Partition}:elemental-inference:${Region}:${Account}:feed/.*"
    ],
    "elemental-support-cases:addcasecomment": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:completemultipartupload": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:creates3cliuploadcommand": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:creates3downloadurl": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:getcase": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:listtagsforcase": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:startmultipartupload": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:tagcase": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:untagcase": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:updatecase": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:updatecasestatus": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "elemental-support-cases:updatemultipartupload": [
      "arn:${Partition}:elemental-support-cases::${Account}:case/.*"
    ],
    "emr-containers:canceljobrun": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:createmanagedendpoint": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:deletejobtemplate": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/jobtemplates/.*"
    ],
    "emr-containers:deletemanagedendpoint": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:deletesecurityconfiguration": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/securityconfigurations/.*"
    ],
    "emr-containers:deletevirtualcluster": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:describejobrun": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:describejobtemplate": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/jobtemplates/.*"
    ],
    "emr-containers:describemanagedendpoint": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:describesecurityconfiguration": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/securityconfigurations/.*"
    ],
    "emr-containers:describevirtualcluster": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:getmanagedendpointsessioncredentials": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:listjobruns": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:listmanagedendpoints": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:listtagsforresource": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*",
      "arn:${Partition}:emr-containers:${Region}:${Account}:/jobtemplates/.*",
      "arn:${Partition}:emr-containers:${Region}:${Account}:/securityconfigurations/.*"
    ],
    "emr-containers:startjobrun": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*"
    ],
    "emr-containers:tagresource": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*",
      "arn:${Partition}:emr-containers:${Region}:${Account}:/jobtemplates/.*",
      "arn:${Partition}:emr-containers:${Region}:${Account}:/securityconfigurations/.*"
    ],
    "emr-containers:untagresource": [
      "arn:${Partition}:emr-containers:${Region}:${Account}:/virtualclusters/.*",
      "arn:${Partition}:emr-containers:${Region}:${Account}:/jobtemplates/.*",
      "arn:${Partition}:emr-containers:${Region}:${Account}:/securityconfigurations/.*"
    ],
    "emr-serverless:accessinteractiveendpoints": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:accesslivyendpoints": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:accesssystemprofilelogs": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:canceljobrun": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:deleteapplication": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:getapplication": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:getdashboardforjobrun": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:getjobrun": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:getresourcedashboard": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:getsession": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:getsessionendpoint": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:listjobrunattempts": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:listjobruns": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:listsessions": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:listtagsforresource": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:startapplication": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:startjobrun": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:startsession": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:stopapplication": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:tagresource": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:terminatesession": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:untagresource": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "emr-serverless:updateapplication": [
      "arn:${Partition}:emr-serverless:${Region}:${Account}:/applications/.*"
    ],
    "entityresolution:batchdeleteuniqueid": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*"
    ],
    "entityresolution:deleteidmappingworkflow": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/.*"
    ],
    "entityresolution:deleteidnamespace": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idnamespace/.*"
    ],
    "entityresolution:deletematchingworkflow": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*"
    ],
    "entityresolution:deleteschemamapping": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:schemamapping/.*"
    ],
    "entityresolution:generatematchid": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*"
    ],
    "entityresolution:getidmappingjob": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/.*"
    ],
    "entityresolution:getidmappingworkflow": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/.*"
    ],
    "entityresolution:getidnamespace": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idnamespace/.*"
    ],
    "entityresolution:getmatchid": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*"
    ],
    "entityresolution:getmatchingjob": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*"
    ],
    "entityresolution:getmatchingworkflow": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*"
    ],
    "entityresolution:getproviderservice": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:providerservice/.*"
    ],
    "entityresolution:getschemamapping": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:schemamapping/.*"
    ],
    "entityresolution:listidmappingjobs": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/.*"
    ],
    "entityresolution:listmatchingjobs": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*"
    ],
    "entityresolution:startidmappingjob": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/.*"
    ],
    "entityresolution:startmatchingjob": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*"
    ],
    "entityresolution:tagresource": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/.*",
      "arn:${Partition}:entityresolution:${Region}:${Account}:idnamespace/.*",
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*",
      "arn:${Partition}:entityresolution:${Region}:${Account}:providerservice/.*",
      "arn:${Partition}:entityresolution:${Region}:${Account}:schemamapping/.*"
    ],
    "entityresolution:untagresource": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/.*",
      "arn:${Partition}:entityresolution:${Region}:${Account}:idnamespace/.*",
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*",
      "arn:${Partition}:entityresolution:${Region}:${Account}:providerservice/.*",
      "arn:${Partition}:entityresolution:${Region}:${Account}:schemamapping/.*"
    ],
    "entityresolution:updateidmappingworkflow": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idmappingworkflow/.*"
    ],
    "entityresolution:updateidnamespace": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:idnamespace/.*"
    ],
    "entityresolution:updatematchingworkflow": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:matchingworkflow/.*"
    ],
    "entityresolution:updateschemamapping": [
      "arn:${Partition}:entityresolution:${Region}:${Account}:schemamapping/.*"
    ],
    "es:adddatasource": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:adddirectquerydatasource": [
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*"
    ],
    "es:addtags": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*",
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:associatepackage": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:associatepackages": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:attachdatasource": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:canceldomainconfigchange": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:cancelelasticsearchservicesoftwareupdate": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:cancelservicesoftwareupdate": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:createdomain": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:createelasticsearchdomain": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:createindex": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:createoutboundconnection": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:createoutboundcrossclustersearchconnection": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:deleteapplication": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:deletedatasource": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:deletedirectquerydatasource": [
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*"
    ],
    "es:deletedomain": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:deleteelasticsearchdomain": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:deleteindex": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:deregistercapability": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:describedatasourceattachment": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:describedomain": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describedomainautotunes": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describedomainchangeprogress": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describedomainconfig": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describedomainhealth": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describedomainnodes": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describedomains": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describedryrunprogress": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describeelasticsearchdomain": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describeelasticsearchdomainconfig": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describeelasticsearchdomains": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:describeinsightdetails": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:detachdatasource": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:dissociatepackage": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:dissociatepackages": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:escrossclusterget": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:eshttpdelete": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:eshttpget": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:eshttphead": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:eshttppatch": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:eshttppost": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:eshttpput": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:getapplication": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:getcapability": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:getcompatibleelasticsearchversions": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:getcompatibleversions": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:getdatasource": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:getdefaultapplicationsetting": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:getdirectquerydatasource": [
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*"
    ],
    "es:getdomainmaintenancestatus": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:getindex": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:getmigration": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:getupgradehistory": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:getupgradestatus": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:insightfeedback": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:listapplications": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:listdatasourceattachments": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:listdatasources": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:listdirectquerydatasources": [
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*"
    ],
    "es:listdomainmaintenances": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:listinsights": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:listmigrations": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:listpackagesfordomain": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:listscheduledactions": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:listtags": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*",
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:putdefaultapplicationsetting": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:registercapability": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:removetags": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*",
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:rollbackelasticsearchservicesoftwareupdate": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:rollbackservicesoftwareupdate": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:startdomainmaintenance": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:startelasticsearchservicesoftwareupdate": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:startmigration": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:startservicesoftwareupdate": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:updateapplication": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "es:updatedatasource": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:updatedirectquerydatasource": [
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*"
    ],
    "es:updatedomainconfig": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:updateelasticsearchdomainconfig": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:updateindex": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:updatescheduledaction": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:upgradedomain": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "es:upgradeelasticsearchdomain": [
      "arn:${Partition}:es:${Region}:${Account}:domain/.*"
    ],
    "events:activateeventsource": [
      "arn:${Partition}:events:${Region}::event-source/.*"
    ],
    "events:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*"
    ],
    "events:cancelreplay": [
      "arn:${Partition}:events:${Region}:${Account}:replay/.*"
    ],
    "events:createapidestination": [
      "arn:${Partition}:events:${Region}:${Account}:api-destination/.*",
      "arn:${Partition}:events:${Region}:${Account}:connection/.*"
    ],
    "events:createarchive": [
      "arn:${Partition}:kms:${Region}:${Account}:alias/.*",
      "arn:${Partition}:events:${Region}:${Account}:archive/.*",
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*",
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "events:createconnection": [
      "arn:${Partition}:events:${Region}:${Account}:connection/.*"
    ],
    "events:createendpoint": [
      "arn:${Partition}:events:${Region}:${Account}:endpoint/.*"
    ],
    "events:createeventbus": [
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*"
    ],
    "events:createpartnereventsource": [
      "arn:${Partition}:events:${Region}::event-source/.*"
    ],
    "events:deactivateeventsource": [
      "arn:${Partition}:events:${Region}::event-source/.*"
    ],
    "events:deauthorizeconnection": [
      "arn:${Partition}:events:${Region}:${Account}:connection/.*"
    ],
    "events:deleteapidestination": [
      "arn:${Partition}:events:${Region}:${Account}:api-destination/.*"
    ],
    "events:deletearchive": [
      "arn:${Partition}:events:${Region}:${Account}:archive/.*"
    ],
    "events:deleteconnection": [
      "arn:${Partition}:events:${Region}:${Account}:connection/.*"
    ],
    "events:deleteendpoint": [
      "arn:${Partition}:events:${Region}:${Account}:endpoint/.*"
    ],
    "events:deleteeventbus": [
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*"
    ],
    "events:deletepartnereventsource": [
      "arn:${Partition}:events:${Region}::event-source/.*"
    ],
    "events:deleterule": [
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:describeapidestination": [
      "arn:${Partition}:events:${Region}:${Account}:api-destination/.*",
      "arn:${Partition}:events:${Region}:${Account}:connection/.*"
    ],
    "events:describearchive": [
      "arn:${Partition}:events:${Region}:${Account}:archive/.*"
    ],
    "events:describeconnection": [
      "arn:${Partition}:events:${Region}:${Account}:connection/.*"
    ],
    "events:describeendpoint": [
      "arn:${Partition}:events:${Region}:${Account}:endpoint/.*"
    ],
    "events:describeeventbus": [
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*"
    ],
    "events:describeeventsource": [
      "arn:${Partition}:events:${Region}::event-source/.*"
    ],
    "events:describepartnereventsource": [
      "arn:${Partition}:events:${Region}::event-source/.*"
    ],
    "events:describereplay": [
      "arn:${Partition}:events:${Region}:${Account}:replay/.*"
    ],
    "events:describerule": [
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:disablerule": [
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:enablerule": [
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:invokeapidestination": [
      "arn:${Partition}:events:${Region}:${Account}:api-destination/.*"
    ],
    "events:listpartnereventsourceaccounts": [
      "arn:${Partition}:events:${Region}::event-source/.*"
    ],
    "events:listtagsforresource": [
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*",
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:listtargetsbyrule": [
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:putevents": [
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*"
    ],
    "events:putrule": [
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:puttargets": [
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:removetargets": [
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:retrieveconnectioncredentials": [
      "arn:${Partition}:events:${Region}:${Account}:connection/.*"
    ],
    "events:startreplay": [
      "arn:${Partition}:events:${Region}:${Account}:archive/.*",
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*",
      "arn:${Partition}:events:${Region}:${Account}:replay/.*"
    ],
    "events:tagresource": [
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*",
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:untagresource": [
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*",
      "arn:${Partition}:events:${Region}:${Account}:rule/.*"
    ],
    "events:updateapidestination": [
      "arn:${Partition}:events:${Region}:${Account}:api-destination/.*"
    ],
    "events:updatearchive": [
      "arn:${Partition}:kms:${Region}:${Account}:alias/.*",
      "arn:${Partition}:events:${Region}:${Account}:archive/.*",
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "events:updateconnection": [
      "arn:${Partition}:events:${Region}:${Account}:connection/.*"
    ],
    "events:updateendpoint": [
      "arn:${Partition}:events:${Region}:${Account}:endpoint/.*"
    ],
    "events:updateeventbus": [
      "arn:${Partition}:events:${Region}:${Account}:event-bus/.*"
    ],
    "evidently:batchevaluatefeature": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:deleteexperiment": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:deletefeature": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:deletelaunch": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:deleteproject": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:deletesegment": [
      "arn:${Partition}:evidently:${Region}:${Account}:segment/.*"
    ],
    "evidently:evaluatefeature": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:getexperiment": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:getexperimentresults": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:getfeature": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:getlaunch": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:getproject": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:getsegment": [
      "arn:${Partition}:evidently:${Region}:${Account}:segment/.*"
    ],
    "evidently:putprojectevents": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:startexperiment": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:startlaunch": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:stopexperiment": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:stoplaunch": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:tagresource": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*",
      "arn:${Partition}:evidently:${Region}:${Account}:segment/.*"
    ],
    "evidently:untagresource": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*",
      "arn:${Partition}:evidently:${Region}:${Account}:segment/.*"
    ],
    "evidently:updateexperiment": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:updatefeature": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:updatelaunch": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:updateproject": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evidently:updateprojectdatadelivery": [
      "arn:${Partition}:evidently:${Region}:${Account}:project/.*"
    ],
    "evs:associateeiptovlan": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:createentitlement": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:createenvironmentconnector": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:createenvironmenthost": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:deleteentitlement": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:deleteenvironment": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:deleteenvironmentconnector": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:deleteenvironmenthost": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:disassociateeipfromvlan": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:getdepoturl": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:getenvironment": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:listenvironmentconnectors": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:listenvironmenthosts": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:listenvironmentvlans": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:listtagsforresource": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:listvmentitlements": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:tagresource": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:untagresource": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "evs:updateenvironmentconnector": [
      "arn:${Partition}:evs:${Region}:${Account}:environment/.*"
    ],
    "execute-api:invalidatecache": [
      "arn:${Partition}:execute-api:${Region}:${Account}:.*"
    ],
    "execute-api:invoke": [
      "arn:${Partition}:execute-api:${Region}:${Account}:/domainnames/.*",
      "arn:${Partition}:execute-api:${Region}:${Account}:.*"
    ],
    "execute-api:manageconnections": [
      "arn:${Partition}:execute-api:${Region}:${Account}:.*"
    ],
    "finspace-api:getprogrammaticaccesscredentials": [
      "arn:${Partition}:finspace-api:${Region}:${Account}:/credentials/programmatic"
    ],
    "finspace:connectkxcluster": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:createenvironment": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*"
    ],
    "finspace:createkxchangeset": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:createkxcluster": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:createkxdatabase": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:createkxdataview": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:createkxscalinggroup": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:createkxuser": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:createkxvolume": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:createuser": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*",
      "arn:${Partition}:finspace:${Region}:${Account}:user/.*"
    ],
    "finspace:deleteenvironment": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*"
    ],
    "finspace:deletekxcluster": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:deletekxclusternode": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:deletekxdatabase": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:deletekxdataview": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:deletekxenvironment": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:deletekxscalinggroup": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:deletekxuser": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:deletekxvolume": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getenvironment": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*"
    ],
    "finspace:getkxchangeset": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getkxcluster": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getkxconnectionstring": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getkxdatabase": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getkxdataview": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getkxenvironment": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getkxscalinggroup": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getkxuser": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getkxvolume": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:getloadsampledatasetgroupintoenvironmentstatus": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*"
    ],
    "finspace:getuser": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*",
      "arn:${Partition}:finspace:${Region}:${Account}:user/.*"
    ],
    "finspace:listenvironments": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*"
    ],
    "finspace:listkxchangesets": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:listkxclusternodes": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:listkxclusters": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:listkxdatabases": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:listkxdataviews": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:listkxscalinggroups": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:listkxusers": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:listkxvolumes": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:listtagsforresource": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*",
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:listusers": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*",
      "arn:${Partition}:finspace:${Region}:${Account}:user/.*"
    ],
    "finspace:loadsampledatasetgroupintoenvironment": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*"
    ],
    "finspace:mountkxdatabase": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:resetuserpassword": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*",
      "arn:${Partition}:finspace:${Region}:${Account}:user/.*"
    ],
    "finspace:tagresource": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*",
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:untagresource": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*",
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:updateenvironment": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*"
    ],
    "finspace:updatekxclustercodeconfiguration": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:updatekxclusterdatabases": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:updatekxdatabase": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:updatekxdataview": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:updatekxenvironment": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:updatekxenvironmentnetwork": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:updatekxuser": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:updatekxvolume": [
      "arn:${Partition}:finspace:${Region}:${Account}:kxEnvironment/.*"
    ],
    "finspace:updateuser": [
      "arn:${Partition}:finspace:${Region}:${Account}:environment/.*",
      "arn:${Partition}:finspace:${Region}:${Account}:user/.*"
    ],
    "firehose:createdeliverystream": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:deletedeliverystream": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:describedeliverystream": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:listtagsfordeliverystream": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:putrecord": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:putrecordbatch": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:startdeliverystreamencryption": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:stopdeliverystreamencryption": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:tagdeliverystream": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:untagdeliverystream": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "firehose:updatedestination": [
      "arn:${Partition}:firehose:${Region}:${Account}:deliverystream/.*"
    ],
    "fis:createexperimenttemplate": [
      "arn:${Partition}:fis:${Region}:${Account}:action/.*",
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:createtargetaccountconfiguration": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:deleteexperimenttemplate": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:deletetargetaccountconfiguration": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:getaction": [
      "arn:${Partition}:fis:${Region}:${Account}:action/.*"
    ],
    "fis:getexperiment": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*"
    ],
    "fis:getexperimenttargetaccountconfiguration": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*"
    ],
    "fis:getexperimenttemplate": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:getsafetylever": [
      "arn:${Partition}:fis:${Region}:${Account}:safety-lever/.*"
    ],
    "fis:gettargetaccountconfiguration": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:injectapiinternalerror": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*"
    ],
    "fis:injectapithrottleerror": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*"
    ],
    "fis:injectapiunavailableerror": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*"
    ],
    "fis:listexperimentresolvedtargets": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*"
    ],
    "fis:listexperimenttargetaccountconfigurations": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*"
    ],
    "fis:listtagsforresource": [
      "arn:${Partition}:fis:${Region}:${Account}:action/.*",
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:listtargetaccountconfigurations": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:startexperiment": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:stopexperiment": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*"
    ],
    "fis:tagresource": [
      "arn:${Partition}:fis:${Region}:${Account}:action/.*",
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:untagresource": [
      "arn:${Partition}:fis:${Region}:${Account}:action/.*",
      "arn:${Partition}:fis:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:updateexperimenttemplate": [
      "arn:${Partition}:fis:${Region}:${Account}:action/.*",
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fis:updatesafetyleverstate": [
      "arn:${Partition}:fis:${Region}:${Account}:safety-lever/.*"
    ],
    "fis:updatetargetaccountconfiguration": [
      "arn:${Partition}:fis:${Region}:${Account}:experiment-template/.*"
    ],
    "fms:batchassociateresource": [
      "arn:${Partition}:fms:${Region}:${Account}:resource-set/.*"
    ],
    "fms:batchdisassociateresource": [
      "arn:${Partition}:fms:${Region}:${Account}:resource-set/.*"
    ],
    "fms:deleteappslist": [
      "arn:${Partition}:fms:${Region}:${Account}:applications-list/.*"
    ],
    "fms:deletepolicy": [
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*"
    ],
    "fms:deleteprotocolslist": [
      "arn:${Partition}:fms:${Region}:${Account}:protocols-list/.*"
    ],
    "fms:deleteresourceset": [
      "arn:${Partition}:fms:${Region}:${Account}:resource-set/.*"
    ],
    "fms:getappslist": [
      "arn:${Partition}:fms:${Region}:${Account}:applications-list/.*"
    ],
    "fms:getcompliancedetail": [
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*"
    ],
    "fms:getpolicy": [
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*"
    ],
    "fms:getprotectionstatus": [
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*"
    ],
    "fms:getprotocolslist": [
      "arn:${Partition}:fms:${Region}:${Account}:protocols-list/.*"
    ],
    "fms:getresourceset": [
      "arn:${Partition}:fms:${Region}:${Account}:resource-set/.*"
    ],
    "fms:getviolationdetails": [
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*"
    ],
    "fms:listcompliancestatus": [
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*"
    ],
    "fms:listresourcesetresources": [
      "arn:${Partition}:fms:${Region}:${Account}:resource-set/.*"
    ],
    "fms:listtagsforresource": [
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*"
    ],
    "fms:putappslist": [
      "arn:${Partition}:fms:${Region}:${Account}:applications-list/.*"
    ],
    "fms:putpolicy": [
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*"
    ],
    "fms:putprotocolslist": [
      "arn:${Partition}:fms:${Region}:${Account}:protocols-list/.*"
    ],
    "fms:putresourceset": [
      "arn:${Partition}:fms:${Region}:${Account}:resource-set/.*"
    ],
    "fms:tagresource": [
      "arn:${Partition}:fms:${Region}:${Account}:applications-list/.*",
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*",
      "arn:${Partition}:fms:${Region}:${Account}:protocols-list/.*",
      "arn:${Partition}:fms:${Region}:${Account}:resource-set/.*"
    ],
    "fms:untagresource": [
      "arn:${Partition}:fms:${Region}:${Account}:applications-list/.*",
      "arn:${Partition}:fms:${Region}:${Account}:policy/.*",
      "arn:${Partition}:fms:${Region}:${Account}:protocols-list/.*",
      "arn:${Partition}:fms:${Region}:${Account}:resource-set/.*"
    ],
    "forecast:createdataset": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset/.*"
    ],
    "forecast:createdatasetgroup": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-group/.*"
    ],
    "forecast:createdatasetimportjob": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-import-job/.*"
    ],
    "forecast:createexplainability": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*"
    ],
    "forecast:createexplainabilityexport": [
      "arn:${Partition}:forecast:${Region}:${Account}:explainability/.*"
    ],
    "forecast:createforecast": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*"
    ],
    "forecast:createforecastendpoint": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*"
    ],
    "forecast:createforecastexportjob": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*"
    ],
    "forecast:createmonitor": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*"
    ],
    "forecast:createpredictor": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-group/.*"
    ],
    "forecast:createpredictorbacktestexportjob": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*"
    ],
    "forecast:createwhatifanalysis": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*"
    ],
    "forecast:createwhatifforecast": [
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-analysis/.*"
    ],
    "forecast:createwhatifforecastexport": [
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/.*"
    ],
    "forecast:deletedataset": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset/.*"
    ],
    "forecast:deletedatasetgroup": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-group/.*"
    ],
    "forecast:deletedatasetimportjob": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-import-job/.*"
    ],
    "forecast:deleteexplainability": [
      "arn:${Partition}:forecast:${Region}:${Account}:explainability/.*"
    ],
    "forecast:deleteexplainabilityexport": [
      "arn:${Partition}:forecast:${Region}:${Account}:explainability-export/.*"
    ],
    "forecast:deleteforecast": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*"
    ],
    "forecast:deleteforecastendpoint": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/.*"
    ],
    "forecast:deleteforecastexportjob": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-export-job/.*"
    ],
    "forecast:deletemonitor": [
      "arn:${Partition}:forecast:${Region}:${Account}:monitor/.*"
    ],
    "forecast:deletepredictor": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*"
    ],
    "forecast:deletepredictorbacktestexportjob": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor-backtest-export-job/.*"
    ],
    "forecast:deleteresourcetree": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-import-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability-export/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor-backtest-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-analysis/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast-export/.*"
    ],
    "forecast:deletewhatifanalysis": [
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-analysis/.*"
    ],
    "forecast:deletewhatifforecast": [
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/.*"
    ],
    "forecast:deletewhatifforecastexport": [
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast-export/.*"
    ],
    "forecast:describeautopredictor": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*"
    ],
    "forecast:describedataset": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset/.*"
    ],
    "forecast:describedatasetgroup": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-group/.*"
    ],
    "forecast:describedatasetimportjob": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-import-job/.*"
    ],
    "forecast:describeexplainability": [
      "arn:${Partition}:forecast:${Region}:${Account}:explainability/.*"
    ],
    "forecast:describeexplainabilityexport": [
      "arn:${Partition}:forecast:${Region}:${Account}:explainability-export/.*"
    ],
    "forecast:describeforecast": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*"
    ],
    "forecast:describeforecastendpoint": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/.*"
    ],
    "forecast:describeforecastexportjob": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-export-job/.*"
    ],
    "forecast:describemonitor": [
      "arn:${Partition}:forecast:${Region}:${Account}:monitor/.*"
    ],
    "forecast:describepredictor": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*"
    ],
    "forecast:describepredictorbacktestexportjob": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor-backtest-export-job/.*"
    ],
    "forecast:describewhatifanalysis": [
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-analysis/.*"
    ],
    "forecast:describewhatifforecast": [
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/.*"
    ],
    "forecast:describewhatifforecastexport": [
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast-export/.*"
    ],
    "forecast:getaccuracymetrics": [
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*"
    ],
    "forecast:getrecentforecastcontext": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/.*"
    ],
    "forecast:invokeforecastendpoint": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/.*"
    ],
    "forecast:listmonitorevaluations": [
      "arn:${Partition}:forecast:${Region}:${Account}:monitor/.*"
    ],
    "forecast:listtagsforresource": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-import-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability-export/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor-backtest-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-analysis/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast-export/.*"
    ],
    "forecast:queryforecast": [
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*"
    ],
    "forecast:querywhatifforecast": [
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/.*"
    ],
    "forecast:resumeresource": [
      "arn:${Partition}:forecast:${Region}:${Account}:monitor/.*"
    ],
    "forecast:stopresource": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-import-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability-export/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor-backtest-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-analysis/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast-export/.*"
    ],
    "forecast:tagresource": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-import-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability-export/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor-backtest-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-analysis/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast-export/.*"
    ],
    "forecast:untagresource": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-import-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-endpoint/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:explainability-export/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:forecast-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:predictor-backtest-export-job/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-analysis/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:what-if-forecast-export/.*"
    ],
    "forecast:updatedatasetgroup": [
      "arn:${Partition}:forecast:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:forecast:${Region}:${Account}:dataset-group/.*"
    ],
    "frauddetector:batchgetvariable": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:variable/.*"
    ],
    "frauddetector:cancelbatchimportjob": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-import/.*"
    ],
    "frauddetector:cancelbatchpredictionjob": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-prediction/.*"
    ],
    "frauddetector:createbatchimportjob": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-import/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:createbatchpredictionjob": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-prediction/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:createdetectorversion": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:external-model/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:model-version/.*"
    ],
    "frauddetector:createmodel": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:model/.*"
    ],
    "frauddetector:createmodelversion": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:model/.*"
    ],
    "frauddetector:createrule": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*"
    ],
    "frauddetector:deletebatchimportjob": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-import/.*"
    ],
    "frauddetector:deletebatchpredictionjob": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-prediction/.*"
    ],
    "frauddetector:deletedetector": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*"
    ],
    "frauddetector:deletedetectorversion": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*"
    ],
    "frauddetector:deleteentitytype": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:entity-type/.*"
    ],
    "frauddetector:deleteevent": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:deleteeventsbyeventtype": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:deleteeventtype": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:deleteexternalmodel": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:external-model/.*"
    ],
    "frauddetector:deletelabel": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:label/.*"
    ],
    "frauddetector:deletelist": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:list/.*"
    ],
    "frauddetector:deletemodel": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:model/.*"
    ],
    "frauddetector:deletemodelversion": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:model-version/.*"
    ],
    "frauddetector:deleteoutcome": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:outcome/.*"
    ],
    "frauddetector:deleterule": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:rule/.*"
    ],
    "frauddetector:deletevariable": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:variable/.*"
    ],
    "frauddetector:describedetector": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*"
    ],
    "frauddetector:describemodelversions": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:model-version/.*"
    ],
    "frauddetector:getbatchimportjobs": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-import/.*"
    ],
    "frauddetector:getbatchimportjobvalidationreport": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-import/.*"
    ],
    "frauddetector:getbatchpredictionjobs": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-prediction/.*"
    ],
    "frauddetector:getdeleteeventsbyeventtypestatus": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:getdetectors": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*"
    ],
    "frauddetector:getdetectorversion": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*"
    ],
    "frauddetector:getentitytypes": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:entity-type/.*"
    ],
    "frauddetector:getevent": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:geteventprediction": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:geteventpredictionmetadata": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:geteventtypes": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:getexternalmodels": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:external-model/.*"
    ],
    "frauddetector:getlabels": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:label/.*"
    ],
    "frauddetector:getlistelements": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:list/.*"
    ],
    "frauddetector:getlistsmetadata": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:list/.*"
    ],
    "frauddetector:getmodels": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:model/.*"
    ],
    "frauddetector:getmodelversion": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:model-version/.*"
    ],
    "frauddetector:getoutcomes": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:outcome/.*"
    ],
    "frauddetector:getrules": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:rule/.*"
    ],
    "frauddetector:getvariables": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:variable/.*"
    ],
    "frauddetector:listeventpredictions": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:listtagsforresource": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-import/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-prediction/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:entity-type/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:external-model/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:label/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:list/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:model/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:model-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:outcome/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:rule/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:variable/.*"
    ],
    "frauddetector:putdetector": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:putentitytype": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:entity-type/.*"
    ],
    "frauddetector:puteventtype": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:putexternalmodel": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:external-model/.*"
    ],
    "frauddetector:putlabel": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:label/.*"
    ],
    "frauddetector:putoutcome": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:outcome/.*"
    ],
    "frauddetector:sendevent": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:tagresource": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-import/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-prediction/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:entity-type/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:external-model/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:label/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:list/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:model/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:model-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:outcome/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:rule/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:variable/.*"
    ],
    "frauddetector:untagresource": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-import/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:batch-prediction/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:entity-type/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:external-model/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:label/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:list/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:model/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:model-version/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:outcome/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:rule/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:variable/.*"
    ],
    "frauddetector:updatedetectorversion": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:external-model/.*",
      "arn:${Partition}:frauddetector:${Region}:${Account}:model-version/.*"
    ],
    "frauddetector:updatedetectorversionmetadata": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*"
    ],
    "frauddetector:updatedetectorversionstatus": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:detector-version/.*"
    ],
    "frauddetector:updateeventlabel": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:event-type/.*"
    ],
    "frauddetector:updatelist": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:list/.*"
    ],
    "frauddetector:updatemodel": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:model/.*"
    ],
    "frauddetector:updatemodelversion": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:model/.*"
    ],
    "frauddetector:updatemodelversionstatus": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:model-version/.*"
    ],
    "frauddetector:updaterulemetadata": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:rule/.*"
    ],
    "frauddetector:updateruleversion": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:rule/.*"
    ],
    "frauddetector:updatevariable": [
      "arn:${Partition}:frauddetector:${Region}:${Account}:variable/.*"
    ],
    "freertos:createsoftwareconfiguration": [
      "arn:${Partition}:freertos:${Region}:${Account}:configuration/.*"
    ],
    "freertos:deletesoftwareconfiguration": [
      "arn:${Partition}:freertos:${Region}:${Account}:configuration/.*"
    ],
    "freertos:describesoftwareconfiguration": [
      "arn:${Partition}:freertos:${Region}:${Account}:configuration/.*"
    ],
    "freertos:describesubscription": [
      "arn:${Partition}:freertos:${Region}:${Account}:subscription/.*"
    ],
    "freertos:updatesoftwareconfiguration": [
      "arn:${Partition}:freertos:${Region}:${Account}:configuration/.*"
    ],
    "fsx:associatefilegateway": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:associatefilesystemaliases": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:bypasssnaplockenterpriseretention": [
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:canceldatarepositorytask": [
      "arn:${Partition}:fsx:${Region}:${Account}:task/.*"
    ],
    "fsx:copybackup": [
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*"
    ],
    "fsx:copysnapshotandupdatevolume": [
      "arn:${Partition}:fsx:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:createandattachs3accesspoint": [
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:createbackup": [
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:createdatarepositoryassociation": [
      "arn:${Partition}:fsx:${Region}:${Account}:association/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:createdatarepositorytask": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:task/.*"
    ],
    "fsx:createfilecache": [
      "arn:${Partition}:fsx:${Region}:${Account}:association/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-cache/.*"
    ],
    "fsx:createfilesystem": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:createfilesystemfrombackup": [
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:createsnapshot": [
      "arn:${Partition}:fsx:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:createstoragevirtualmachine": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/.*"
    ],
    "fsx:createvolume": [
      "arn:${Partition}:fsx:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:createvolumefrombackup": [
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:deletebackup": [
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*"
    ],
    "fsx:deletedatarepositoryassociation": [
      "arn:${Partition}:fsx:${Region}:${Account}:association/.*"
    ],
    "fsx:deletefilecache": [
      "arn:${Partition}:fsx:${Region}:${Account}:association/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-cache/.*"
    ],
    "fsx:deletefilesystem": [
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:deleteresourcepolicy": [
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:deletesnapshot": [
      "arn:${Partition}:fsx:${Region}:${Account}:snapshot/.*"
    ],
    "fsx:deletestoragevirtualmachine": [
      "arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/.*"
    ],
    "fsx:deletevolume": [
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:describeassociatedfilegateways": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:describefilesystemaliases": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:detachanddeletes3accesspoint": [
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:disassociatefilegateway": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:disassociatefilesystemaliases": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:getresourcepolicy": [
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:listtagsforresource": [
      "arn:${Partition}:fsx:${Region}:${Account}:association/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-cache/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:task/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:managebackupprincipalassociations": [
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*"
    ],
    "fsx:putresourcepolicy": [
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:releasefilesystemnfsv3locks": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:restorevolumefromsnapshot": [
      "arn:${Partition}:fsx:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:startmisconfiguredstaterecovery": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:tagresource": [
      "arn:${Partition}:fsx:${Region}:${Account}:association/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-cache/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:task/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:untagresource": [
      "arn:${Partition}:fsx:${Region}:${Account}:association/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:backup/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-cache/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:task/.*",
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "fsx:updatedatarepositoryassociation": [
      "arn:${Partition}:fsx:${Region}:${Account}:association/.*"
    ],
    "fsx:updatefilecache": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-cache/.*"
    ],
    "fsx:updatefilesystem": [
      "arn:${Partition}:fsx:${Region}:${Account}:file-system/.*"
    ],
    "fsx:updatesnapshot": [
      "arn:${Partition}:fsx:${Region}:${Account}:snapshot/.*"
    ],
    "fsx:updatestoragevirtualmachine": [
      "arn:${Partition}:fsx:${Region}:${Account}:storage-virtual-machine/.*"
    ],
    "fsx:updatevolume": [
      "arn:${Partition}:fsx:${Region}:${Account}:volume/.*"
    ],
    "gamelift:claimgameserver": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:createfleetlocations": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:deletealias": [
      "arn:${Partition}:gamelift:${Region}::alias/.*"
    ],
    "gamelift:deletebuild": [
      "arn:${Partition}:gamelift:${Region}:${Account}:build/.*"
    ],
    "gamelift:deletecontainerfleet": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*"
    ],
    "gamelift:deletecontainergroupdefinition": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containergroupdefinition/.*"
    ],
    "gamelift:deletefleet": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:deletefleetlocations": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:deletegameservergroup": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:deletegamesessionqueue": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gamesessionqueue/.*"
    ],
    "gamelift:deletelocation": [
      "arn:${Partition}:gamelift:${Region}:${Account}:location/.*"
    ],
    "gamelift:deletematchmakingconfiguration": [
      "arn:${Partition}:gamelift:${Region}:${Account}:matchmakingconfiguration/.*"
    ],
    "gamelift:deletematchmakingruleset": [
      "arn:${Partition}:gamelift:${Region}:${Account}:matchmakingruleset/.*"
    ],
    "gamelift:deletescalingpolicy": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:deletescript": [
      "arn:${Partition}:gamelift:${Region}:${Account}:script/.*"
    ],
    "gamelift:deregistercompute": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:deregistergameserver": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:describealias": [
      "arn:${Partition}:gamelift:${Region}::alias/.*"
    ],
    "gamelift:describebuild": [
      "arn:${Partition}:gamelift:${Region}:${Account}:build/.*"
    ],
    "gamelift:describecompute": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:describecontainerfleet": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*"
    ],
    "gamelift:describecontainergroupdefinition": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containergroupdefinition/.*"
    ],
    "gamelift:describecontainergroupportmappings": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*"
    ],
    "gamelift:describefleetdeployment": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*"
    ],
    "gamelift:describefleetevents": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:describefleetlocationattributes": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:describefleetlocationcapacity": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:describefleetlocationutilization": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:describefleetportsettings": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:describegameserver": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:describegameservergroup": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:describegameserverinstances": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:describeinstances": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:describeruntimeconfiguration": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:describescalingpolicies": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:describescript": [
      "arn:${Partition}:gamelift:${Region}:${Account}:script/.*"
    ],
    "gamelift:getcomputeaccess": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:getcomputeauthtoken": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:getinstanceaccess": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:listcompute": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:listcontainergroupdefinitionversions": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containergroupdefinition/.*"
    ],
    "gamelift:listgameservers": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:listtagsforresource": [
      "arn:${Partition}:gamelift:${Region}::alias/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:build/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:containergroupdefinition/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:gamesessionqueue/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:location/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:matchmakingconfiguration/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:matchmakingruleset/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:script/.*"
    ],
    "gamelift:putscalingpolicy": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:registercompute": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:registergameserver": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:requestuploadcredentials": [
      "arn:${Partition}:gamelift:${Region}:${Account}:build/.*"
    ],
    "gamelift:resolvealias": [
      "arn:${Partition}:gamelift:${Region}::alias/.*"
    ],
    "gamelift:resumegameservergroup": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:startfleetactions": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:startgamesessionplacement": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gamesessionqueue/.*"
    ],
    "gamelift:stopfleetactions": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:suspendgameservergroup": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:tagresource": [
      "arn:${Partition}:gamelift:${Region}::alias/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:build/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:containergroupdefinition/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:gamesessionqueue/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:location/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:matchmakingconfiguration/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:matchmakingruleset/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:script/.*"
    ],
    "gamelift:untagresource": [
      "arn:${Partition}:gamelift:${Region}::alias/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:build/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:containergroupdefinition/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:gamesessionqueue/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:location/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:matchmakingconfiguration/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:matchmakingruleset/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:script/.*"
    ],
    "gamelift:updatealias": [
      "arn:${Partition}:gamelift:${Region}::alias/.*"
    ],
    "gamelift:updatebuild": [
      "arn:${Partition}:gamelift:${Region}:${Account}:build/.*"
    ],
    "gamelift:updatecontainerfleet": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*"
    ],
    "gamelift:updatecontainergroupdefinition": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containergroupdefinition/.*"
    ],
    "gamelift:updatefleetattributes": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:updatefleetcapacity": [
      "arn:${Partition}:gamelift:${Region}:${Account}:containerfleet/.*",
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:updatefleetportsettings": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:updategameserver": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:updategameservergroup": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gameservergroup/.*"
    ],
    "gamelift:updategamesessionqueue": [
      "arn:${Partition}:gamelift:${Region}:${Account}:gamesessionqueue/.*"
    ],
    "gamelift:updatematchmakingconfiguration": [
      "arn:${Partition}:gamelift:${Region}:${Account}:matchmakingconfiguration/.*"
    ],
    "gamelift:updateruntimeconfiguration": [
      "arn:${Partition}:gamelift:${Region}:${Account}:fleet/.*"
    ],
    "gamelift:updatescript": [
      "arn:${Partition}:gamelift:${Region}:${Account}:script/.*"
    ],
    "gameliftstreams:addstreamgrouplocations": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:associateapplications": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*",
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:createstreamsessionadminshell": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:createstreamsessionconnection": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:createstreamurl": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*",
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:deleteapplication": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*"
    ],
    "gameliftstreams:deletestreamgroup": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:disassociateapplications": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*",
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:exportstreamsessionfiles": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:getapplication": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*"
    ],
    "gameliftstreams:getstreamgroup": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:getstreamsession": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:getstreamurl": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:listapplicationshadercaches": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*"
    ],
    "gameliftstreams:liststreamsessions": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:listtagsforresource": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*",
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:removestreamgrouplocations": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:revokestreamurl": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:startstreamsession": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:tagresource": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*",
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:terminatestreamsession": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:untagresource": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*",
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "gameliftstreams:updateapplication": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:application/.*"
    ],
    "gameliftstreams:updatestreamgroup": [
      "arn:${Partition}:gameliftstreams:${Region}:${Account}:streamgroup/.*"
    ],
    "geo-maps:getstaticmap": [
      "arn:${Partition}:geo-maps:${Region}::provider/default"
    ],
    "geo-maps:gettile": [
      "arn:${Partition}:geo-maps:${Region}::provider/default"
    ],
    "geo-places:autocomplete": [
      "arn:${Partition}:geo-places:${Region}::provider/default"
    ],
    "geo-places:geocode": [
      "arn:${Partition}:geo-places:${Region}::provider/default"
    ],
    "geo-places:getplace": [
      "arn:${Partition}:geo-places:${Region}::provider/default"
    ],
    "geo-places:reversegeocode": [
      "arn:${Partition}:geo-places:${Region}::provider/default"
    ],
    "geo-places:searchnearby": [
      "arn:${Partition}:geo-places:${Region}::provider/default"
    ],
    "geo-places:searchtext": [
      "arn:${Partition}:geo-places:${Region}::provider/default"
    ],
    "geo-places:suggest": [
      "arn:${Partition}:geo-places:${Region}::provider/default"
    ],
    "geo-routes:calculateisolines": [
      "arn:${Partition}:geo-routes:${Region}::provider/default"
    ],
    "geo-routes:calculateroutematrix": [
      "arn:${Partition}:geo-routes:${Region}::provider/default"
    ],
    "geo-routes:calculateroutes": [
      "arn:${Partition}:geo-routes:${Region}::provider/default"
    ],
    "geo-routes:optimizewaypoints": [
      "arn:${Partition}:geo-routes:${Region}::provider/default"
    ],
    "geo-routes:snaptoroads": [
      "arn:${Partition}:geo-routes:${Region}::provider/default"
    ],
    "geo:associatetrackerconsumer": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:batchdeletedevicepositionhistory": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:batchdeletegeofence": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:batchevaluategeofences": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:batchgetdeviceposition": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:batchputgeofence": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:batchupdatedeviceposition": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:calculateroute": [
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*"
    ],
    "geo:calculateroutematrix": [
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*"
    ],
    "geo:canceljob": [
      "arn:${Partition}:geo:${Region}:${Account}:job/.*"
    ],
    "geo:creategeofencecollection": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:createkey": [
      "arn:${Partition}:geo:${Region}:${Account}:api-key/.*"
    ],
    "geo:createmap": [
      "arn:${Partition}:geo:${Region}:${Account}:map/.*"
    ],
    "geo:createplaceindex": [
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*"
    ],
    "geo:createroutecalculator": [
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*"
    ],
    "geo:createtracker": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:deletegeofencecollection": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:deletekey": [
      "arn:${Partition}:geo:${Region}:${Account}:api-key/.*"
    ],
    "geo:deletemap": [
      "arn:${Partition}:geo:${Region}:${Account}:map/.*"
    ],
    "geo:deleteplaceindex": [
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*"
    ],
    "geo:deleteroutecalculator": [
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*"
    ],
    "geo:deletetracker": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:describegeofencecollection": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:describekey": [
      "arn:${Partition}:geo:${Region}:${Account}:api-key/.*"
    ],
    "geo:describemap": [
      "arn:${Partition}:geo:${Region}:${Account}:map/.*"
    ],
    "geo:describeplaceindex": [
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*"
    ],
    "geo:describeroutecalculator": [
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*"
    ],
    "geo:describetracker": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:disassociatetrackerconsumer": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:forecastgeofenceevents": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:getdeviceposition": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:getdevicepositionhistory": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:getgeofence": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:getjob": [
      "arn:${Partition}:geo:${Region}:${Account}:job/.*"
    ],
    "geo:getmapglyphs": [
      "arn:${Partition}:geo:${Region}:${Account}:map/.*"
    ],
    "geo:getmapsprites": [
      "arn:${Partition}:geo:${Region}:${Account}:map/.*"
    ],
    "geo:getmapstyledescriptor": [
      "arn:${Partition}:geo:${Region}:${Account}:map/.*"
    ],
    "geo:getmaptile": [
      "arn:${Partition}:geo:${Region}:${Account}:map/.*"
    ],
    "geo:getplace": [
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*"
    ],
    "geo:listdevicepositions": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:listgeofencecollections": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:listgeofences": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:listjobs": [
      "arn:${Partition}:geo:${Region}:${Account}:job/.*"
    ],
    "geo:listkeys": [
      "arn:${Partition}:geo:${Region}:${Account}:api-key/.*"
    ],
    "geo:listmaps": [
      "arn:${Partition}:geo:${Region}:${Account}:map/.*"
    ],
    "geo:listplaceindexes": [
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*"
    ],
    "geo:listroutecalculators": [
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*"
    ],
    "geo:listtagsforresource": [
      "arn:${Partition}:geo:${Region}:${Account}:api-key/.*",
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*",
      "arn:${Partition}:geo:${Region}:${Account}:job/.*",
      "arn:${Partition}:geo:${Region}:${Account}:map/.*",
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*",
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*",
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:listtrackerconsumers": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:listtrackers": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:putgeofence": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:searchplaceindexforposition": [
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*"
    ],
    "geo:searchplaceindexforsuggestions": [
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*"
    ],
    "geo:searchplaceindexfortext": [
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*"
    ],
    "geo:startjob": [
      "arn:${Partition}:geo:${Region}:${Account}:job/.*"
    ],
    "geo:tagresource": [
      "arn:${Partition}:geo:${Region}:${Account}:api-key/.*",
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*",
      "arn:${Partition}:geo:${Region}:${Account}:job/.*",
      "arn:${Partition}:geo:${Region}:${Account}:map/.*",
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*",
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*",
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:untagresource": [
      "arn:${Partition}:geo:${Region}:${Account}:api-key/.*",
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*",
      "arn:${Partition}:geo:${Region}:${Account}:job/.*",
      "arn:${Partition}:geo:${Region}:${Account}:map/.*",
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*",
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*",
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:updategeofencecollection": [
      "arn:${Partition}:geo:${Region}:${Account}:geofence-collection/.*"
    ],
    "geo:updatekey": [
      "arn:${Partition}:geo:${Region}:${Account}:api-key/.*"
    ],
    "geo:updatemap": [
      "arn:${Partition}:geo:${Region}:${Account}:map/.*"
    ],
    "geo:updateplaceindex": [
      "arn:${Partition}:geo:${Region}:${Account}:place-index/.*"
    ],
    "geo:updateroutecalculator": [
      "arn:${Partition}:geo:${Region}:${Account}:route-calculator/.*"
    ],
    "geo:updatetracker": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "geo:verifydeviceposition": [
      "arn:${Partition}:geo:${Region}:${Account}:tracker/.*"
    ],
    "glacier:abortmultipartupload": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:abortvaultlock": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:addtagstovault": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:completemultipartupload": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:completevaultlock": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:createvault": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:deletearchive": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:deletevault": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:deletevaultaccesspolicy": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:deletevaultnotifications": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:describejob": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:describevault": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:getjoboutput": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:getvaultaccesspolicy": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:getvaultlock": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:getvaultnotifications": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:initiatejob": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:initiatemultipartupload": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:initiatevaultlock": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:listjobs": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:listmultipartuploads": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:listparts": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:listtagsforvault": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:removetagsfromvault": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:setvaultaccesspolicy": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:setvaultnotifications": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:uploadarchive": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "glacier:uploadmultipartpart": [
      "arn:${Partition}:glacier:${Region}:${Account}:vaults/.*"
    ],
    "globalaccelerator:addcustomroutingendpoints": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:addendpoints": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:allowcustomroutingtraffic": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:createcustomroutingendpointgroup": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:createcustomroutinglistener": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:createendpointgroup": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:createlistener": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:deleteaccelerator": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:deletecrossaccountattachment": [
      "arn:${Partition}:globalaccelerator::${Account}:attachment/.*"
    ],
    "globalaccelerator:deletecustomroutingaccelerator": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:deletecustomroutingendpointgroup": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:deletecustomroutinglistener": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:deleteendpointgroup": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:deletelistener": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:denycustomroutingtraffic": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:describeaccelerator": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:describeacceleratorattributes": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:describecrossaccountattachment": [
      "arn:${Partition}:globalaccelerator::${Account}:attachment/.*"
    ],
    "globalaccelerator:describecustomroutingaccelerator": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:describecustomroutingacceleratorattributes": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:describecustomroutingendpointgroup": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:describecustomroutinglistener": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:describeendpointgroup": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:describelistener": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:listcustomroutingendpointgroups": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:listcustomroutinglisteners": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:listcustomroutingportmappings": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:listendpointgroups": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:listlisteners": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:listtagsforresource": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*",
      "arn:${Partition}:globalaccelerator::${Account}:attachment/.*"
    ],
    "globalaccelerator:removecustomroutingendpoints": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:removeendpoints": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:tagresource": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*",
      "arn:${Partition}:globalaccelerator::${Account}:attachment/.*"
    ],
    "globalaccelerator:untagresource": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*",
      "arn:${Partition}:globalaccelerator::${Account}:attachment/.*"
    ],
    "globalaccelerator:updateaccelerator": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:updateacceleratorattributes": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:updatecrossaccountattachment": [
      "arn:${Partition}:globalaccelerator::${Account}:attachment/.*"
    ],
    "globalaccelerator:updatecustomroutingaccelerator": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:updatecustomroutingacceleratorattributes": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:updatecustomroutinglistener": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:updateendpointgroup": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "globalaccelerator:updatelistener": [
      "arn:${Partition}:globalaccelerator::${Account}:accelerator/.*"
    ],
    "glue:authorizeinboundintegration": [
      "arn:${Partition}:glue:${Region}:${Account}:integration:.*"
    ],
    "glue:batchcreatepartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:batchdeleteconnection": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:batchdeletepartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:batchdeletetable": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:batchdeletetableversion": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:batchgetblueprints": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*"
    ],
    "glue:batchgetcrawlers": [
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*"
    ],
    "glue:batchgetdevendpoints": [
      "arn:${Partition}:glue:${Region}:${Account}:devEndpoint/.*"
    ],
    "glue:batchgetjobs": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:batchgetpartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:batchgettableoptimizer": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:batchgettriggers": [
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*"
    ],
    "glue:batchgetworkflows": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:batchstopjobrun": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:batchupdatepartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:canceldataqualityrulerecommendationrun": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:canceldataqualityrulesetevaluationrun": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:cancelmltaskrun": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:cancelstatement": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:createblueprint": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*"
    ],
    "glue:createcatalog": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:createcolumnstatisticstasksettings": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:createconnection": [
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:createdatabase": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:createintegration": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:integration:.*"
    ],
    "glue:createintegrationresourceproperty": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:integrationresourceproperty/.*"
    ],
    "glue:createintegrationtableproperties": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*"
    ],
    "glue:createjob": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:createpartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:createpartitionindex": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:createregistry": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*"
    ],
    "glue:createschema": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:createsession": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:createtable": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:createtableoptimizer": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:createtrigger": [
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*"
    ],
    "glue:createusageprofile": [
      "arn:${Partition}:glue:${Region}:${Account}:usageProfile/.*"
    ],
    "glue:createuserdefinedfunction": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:createworkflow": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:deleteblueprint": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*"
    ],
    "glue:deletecatalog": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:deletecolumnstatisticsforpartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:deletecolumnstatisticsfortable": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:deletecolumnstatisticstasksettings": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:deleteconnection": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:deleteconnectiontype": [
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*"
    ],
    "glue:deletecrawler": [
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*"
    ],
    "glue:deletedatabase": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*",
      "arn:${Partition}:glue:${Region}:${Account}:userDefinedFunction/.*"
    ],
    "glue:deletedataqualityruleset": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:deletedevendpoint": [
      "arn:${Partition}:glue:${Region}:${Account}:devEndpoint/.*"
    ],
    "glue:deleteintegration": [
      "arn:${Partition}:glue:${Region}:${Account}:integration:.*"
    ],
    "glue:deleteintegrationresourceproperty": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:integrationresourceproperty/.*"
    ],
    "glue:deleteintegrationtableproperties": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*"
    ],
    "glue:deletejob": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:deletemltransform": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:deletepartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:deletepartitionindex": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:deleteregistry": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*"
    ],
    "glue:deleteresourcepolicy": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:deleteschema": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:deleteschemaversions": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:deletesession": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:deletetable": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:deletetableoptimizer": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:deletetableversion": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:deletetrigger": [
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*"
    ],
    "glue:deleteusageprofile": [
      "arn:${Partition}:glue:${Region}:${Account}:usageProfile/.*"
    ],
    "glue:deleteuserdefinedfunction": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:userDefinedFunction/.*"
    ],
    "glue:deleteworkflow": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:describeconnectiontype": [
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*"
    ],
    "glue:describeentity": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:describeintegrations": [
      "arn:${Partition}:glue:${Region}:${Account}:integration:.*"
    ],
    "glue:federateauthorization": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getblueprint": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*"
    ],
    "glue:getblueprintrun": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*"
    ],
    "glue:getblueprintruns": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*"
    ],
    "glue:getcatalog": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getcatalogimportstatus": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getcatalogs": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getcolumnstatisticsforpartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:getcolumnstatisticsfortable": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:getcompletion": [
      "arn:${Partition}:glue:${Region}:${Account}:completion/.*"
    ],
    "glue:getconnection": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getconnections": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getcrawler": [
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*"
    ],
    "glue:getdashboardurl": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:getdatabase": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getdatabases": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getdatacatalogencryptionsettings": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getdataqualitymodel": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*",
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:getdataqualitymodelresult": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*",
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:getdataqualityresult": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:getdataqualityrulerecommendationrun": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:getdataqualityruleset": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:getdataqualityrulesetevaluationrun": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:getdevendpoint": [
      "arn:${Partition}:glue:${Region}:${Account}:devEndpoint/.*"
    ],
    "glue:getentityrecords": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*"
    ],
    "glue:getintegrationresourceproperty": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:integrationresourceproperty/.*"
    ],
    "glue:getintegrationtableproperties": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*"
    ],
    "glue:getjob": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:getjobrun": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:getjobruns": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:getjobupgradeanalysis": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:getmltaskrun": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:getmltaskruns": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:getmltransform": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:getmltransforms": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:getpartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:getpartitionindexes": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:getpartitions": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:getregistry": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*"
    ],
    "glue:getresourcepolicies": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:getresourcepolicy": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:getschema": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:getschemabydefinition": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:getschemaversion": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:getschemaversionsdiff": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:getsession": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:getsessionendpoint": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:getstatement": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:gettable": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:gettableoptimizer": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:gettables": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:gettableversion": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:gettableversions": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:gettags": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*",
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*",
      "arn:${Partition}:glue:${Region}:${Account}:customEntityType/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:devEndpoint/.*",
      "arn:${Partition}:glue:${Region}:${Account}:job/.*",
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*",
      "arn:${Partition}:glue:${Region}:${Account}:usageProfile/.*",
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:gettrigger": [
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*"
    ],
    "glue:getusageprofile": [
      "arn:${Partition}:glue:${Region}:${Account}:usageProfile/.*"
    ],
    "glue:getuserdefinedfunction": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:userDefinedFunction/.*"
    ],
    "glue:getuserdefinedfunctions": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:userDefinedFunction/.*"
    ],
    "glue:getworkflow": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:getworkflowrun": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:getworkflowrunproperties": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:getworkflowruns": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:importcatalogtoglue": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:listcrawls": [
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*"
    ],
    "glue:listdataqualityresults": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:listdataqualityrulerecommendationruns": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:listdataqualityrulesetevaluationruns": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:listdataqualityrulesets": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:listentities": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:listintegrationresourceproperties": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:integrationresourceproperty/.*"
    ],
    "glue:listjobupgradeanalyses": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:listmltransforms": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:listschemas": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*"
    ],
    "glue:listschemaversions": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:liststatements": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:listtableoptimizerruns": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:modifyintegration": [
      "arn:${Partition}:glue:${Region}:${Account}:integration:.*"
    ],
    "glue:notifyevent": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:passconnection": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*"
    ],
    "glue:publishdataquality": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:putdatacatalogencryptionsettings": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:putdataqualityprofileannotation": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*",
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:putdataqualitystatisticannotation": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*",
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:putresourcepolicy": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:putschemaversionmetadata": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:putworkflowrunproperties": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:queryschemaversionmetadata": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:refreshoauth2tokens": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:registerconnectiontype": [
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*"
    ],
    "glue:registerschemaversion": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:removeschemaversionmetadata": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:renametable": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:resumeworkflowrun": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:runstatement": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:searchtables": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:startblueprintrun": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*"
    ],
    "glue:startcolumnstatisticstaskrun": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:startcolumnstatisticstaskrunschedule": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:startcrawler": [
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*"
    ],
    "glue:startdataqualityrulerecommendationrun": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:startdataqualityrulesetevaluationrun": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:startexportlabelstaskrun": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:startimportlabelstaskrun": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:startjobrun": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:startjobupgradeanalysis": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:startmlevaluationtaskrun": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:startmllabelingsetgenerationtaskrun": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:starttrigger": [
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*"
    ],
    "glue:startworkflowrun": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:stopcolumnstatisticstaskrun": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:stopcolumnstatisticstaskrunschedule": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:stopcrawler": [
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*"
    ],
    "glue:stopjobupgradeanalysis": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:stopsession": [
      "arn:${Partition}:glue:${Region}:${Account}:session/.*"
    ],
    "glue:stoptrigger": [
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*"
    ],
    "glue:stopworkflowrun": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:tagresource": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*",
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*",
      "arn:${Partition}:glue:${Region}:${Account}:customEntityType/.*",
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:devEndpoint/.*",
      "arn:${Partition}:glue:${Region}:${Account}:integration:.*",
      "arn:${Partition}:glue:${Region}:${Account}:integrationresourceproperty/.*",
      "arn:${Partition}:glue:${Region}:${Account}:job/.*",
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*",
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*",
      "arn:${Partition}:glue:${Region}:${Account}:session/.*",
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*",
      "arn:${Partition}:glue:${Region}:${Account}:usageProfile/.*",
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:testconnection": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*"
    ],
    "glue:untagresource": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*",
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*",
      "arn:${Partition}:glue:${Region}:${Account}:customEntityType/.*",
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:devEndpoint/.*",
      "arn:${Partition}:glue:${Region}:${Account}:integration:.*",
      "arn:${Partition}:glue:${Region}:${Account}:integrationresourceproperty/.*",
      "arn:${Partition}:glue:${Region}:${Account}:job/.*",
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*",
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*",
      "arn:${Partition}:glue:${Region}:${Account}:session/.*",
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*",
      "arn:${Partition}:glue:${Region}:${Account}:usageProfile/.*",
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:updateblueprint": [
      "arn:${Partition}:glue:${Region}:${Account}:blueprint/.*"
    ],
    "glue:updatecatalog": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:updatecolumnstatisticsforpartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:updatecolumnstatisticsfortable": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:updatecolumnstatisticstasksettings": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:updateconnection": [
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connectionType:.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:updatecrawler": [
      "arn:${Partition}:glue:${Region}:${Account}:crawler/.*"
    ],
    "glue:updatedatabase": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog"
    ],
    "glue:updatedataqualityruleset": [
      "arn:${Partition}:glue:${Region}:${Account}:dataQualityRuleset/.*"
    ],
    "glue:updatedevendpoint": [
      "arn:${Partition}:glue:${Region}:${Account}:devEndpoint/.*"
    ],
    "glue:updateintegrationresourceproperty": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:integrationresourceproperty/.*"
    ],
    "glue:updateintegrationtableproperties": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:connection/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*"
    ],
    "glue:updatejob": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:updatejobfromsourcecontrol": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:updatemltransform": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "glue:updatepartition": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:updateregistry": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*"
    ],
    "glue:updateschema": [
      "arn:${Partition}:glue:${Region}:${Account}:registry/.*",
      "arn:${Partition}:glue:${Region}:${Account}:schema/.*"
    ],
    "glue:updatesourcecontrolfromjob": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:updatetable": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:updatetableoptimizer": [
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:table/.*"
    ],
    "glue:updatetrigger": [
      "arn:${Partition}:glue:${Region}:${Account}:trigger/.*"
    ],
    "glue:updateusageprofile": [
      "arn:${Partition}:glue:${Region}:${Account}:usageProfile/.*"
    ],
    "glue:updateuserdefinedfunction": [
      "arn:${Partition}:glue:${Region}:${Account}:catalog/.*",
      "arn:${Partition}:glue:${Region}:${Account}:database/.*",
      "arn:${Partition}:glue:${Region}:${Account}:catalog",
      "arn:${Partition}:glue:${Region}:${Account}:userDefinedFunction/.*"
    ],
    "glue:updateworkflow": [
      "arn:${Partition}:glue:${Region}:${Account}:workflow/.*"
    ],
    "glue:upgradejob": [
      "arn:${Partition}:glue:${Region}:${Account}:job/.*"
    ],
    "glue:usemltransforms": [
      "arn:${Partition}:glue:${Region}:${Account}:mlTransform/.*"
    ],
    "grafana:associatelicense": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:createworkspaceapikey": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:createworkspaceserviceaccount": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:createworkspaceserviceaccounttoken": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:deleteworkspace": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:deleteworkspaceapikey": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:deleteworkspaceserviceaccount": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:deleteworkspaceserviceaccounttoken": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:describeworkspace": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:describeworkspaceauthentication": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:describeworkspaceconfiguration": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:disassociatelicense": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:listpermissions": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:listtagsforresource": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:listversions": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:listworkspaceserviceaccounts": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:listworkspaceserviceaccounttokens": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:tagresource": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:untagresource": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:updatepermissions": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:updateworkspace": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:updateworkspaceauthentication": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "grafana:updateworkspaceconfiguration": [
      "arn:${Partition}:grafana:${Region}:${Account}:/workspaces/.*"
    ],
    "greengrass:associateroletogroup": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:batchassociateclientdevicewithcoredevice": [
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*"
    ],
    "greengrass:batchdisassociateclientdevicefromcoredevice": [
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*"
    ],
    "greengrass:canceldeployment": [
      "arn:${Partition}:greengrass:${Region}:${Account}:deployments:.*"
    ],
    "greengrass:createcomponentversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*"
    ],
    "greengrass:createconnectordefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/.*"
    ],
    "greengrass:createcoredefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/.*"
    ],
    "greengrass:createdeployment": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:createdevicedefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/.*"
    ],
    "greengrass:createfunctiondefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/.*"
    ],
    "greengrass:creategroupcertificateauthority": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:creategroupversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:createloggerdefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/.*"
    ],
    "greengrass:createresourcedefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/.*"
    ],
    "greengrass:createsubscriptiondefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/.*"
    ],
    "greengrass:deletecomponent": [
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*"
    ],
    "greengrass:deleteconnectordefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/.*"
    ],
    "greengrass:deletecoredefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/.*"
    ],
    "greengrass:deletecoredevice": [
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*"
    ],
    "greengrass:deletedeployment": [
      "arn:${Partition}:greengrass:${Region}:${Account}:deployments:.*"
    ],
    "greengrass:deletedevicedefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/.*"
    ],
    "greengrass:deletefunctiondefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/.*"
    ],
    "greengrass:deletegroup": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:deleteloggerdefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/.*"
    ],
    "greengrass:deleteresourcedefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/.*"
    ],
    "greengrass:deletesubscriptiondefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/.*"
    ],
    "greengrass:describecomponent": [
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*"
    ],
    "greengrass:disassociaterolefromgroup": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:discover": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "greengrass:getassociatedrole": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:getbulkdeploymentstatus": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/bulk/deployments/.*"
    ],
    "greengrass:getcomponent": [
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*"
    ],
    "greengrass:getcomponentversionartifact": [
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*"
    ],
    "greengrass:getconnectivityinfo": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/things/.*"
    ],
    "greengrass:getconnectordefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/.*"
    ],
    "greengrass:getconnectordefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/.*"
    ],
    "greengrass:getcoredefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/.*"
    ],
    "greengrass:getcoredefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/.*"
    ],
    "greengrass:getcoredevice": [
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*"
    ],
    "greengrass:getdeployment": [
      "arn:${Partition}:greengrass:${Region}:${Account}:deployments:.*"
    ],
    "greengrass:getdeploymentstatus": [
      "arn:${Partition}:greengrass:${Region}:${Account}:deployments:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:getdevicedefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/.*"
    ],
    "greengrass:getdevicedefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/.*"
    ],
    "greengrass:getfunctiondefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/.*"
    ],
    "greengrass:getfunctiondefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/.*"
    ],
    "greengrass:getgroup": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:getgroupcertificateauthority": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:getgroupcertificateconfiguration": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:getgroupversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:getloggerdefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/.*"
    ],
    "greengrass:getloggerdefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/.*"
    ],
    "greengrass:getresourcedefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/.*"
    ],
    "greengrass:getresourcedefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/.*"
    ],
    "greengrass:getsubscriptiondefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/.*"
    ],
    "greengrass:getsubscriptiondefinitionversion": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/.*"
    ],
    "greengrass:getthingruntimeconfiguration": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/things/.*"
    ],
    "greengrass:listbulkdeploymentdetailedreports": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/bulk/deployments/.*"
    ],
    "greengrass:listclientdevicesassociatedwithcoredevice": [
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*"
    ],
    "greengrass:listcomponentversions": [
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*"
    ],
    "greengrass:listconnectordefinitionversions": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/.*"
    ],
    "greengrass:listcoredefinitionversions": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/.*"
    ],
    "greengrass:listdeployments": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:listdevicedefinitionversions": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/.*"
    ],
    "greengrass:listeffectivedeployments": [
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*"
    ],
    "greengrass:listfunctiondefinitionversions": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/.*"
    ],
    "greengrass:listgroupcertificateauthorities": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:listgroupversions": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:listinstalledcomponents": [
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*"
    ],
    "greengrass:listloggerdefinitionversions": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/.*"
    ],
    "greengrass:listresourcedefinitionversions": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/.*"
    ],
    "greengrass:listsubscriptiondefinitionversions": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/.*"
    ],
    "greengrass:listtagsforresource": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/bulk/deployments/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:deployments:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/.*"
    ],
    "greengrass:resetdeployments": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:resolvecomponentcandidates": [
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*"
    ],
    "greengrass:stopbulkdeployment": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/bulk/deployments/.*"
    ],
    "greengrass:tagresource": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/bulk/deployments/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:deployments:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/.*"
    ],
    "greengrass:untagresource": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/bulk/deployments/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:components:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:deployments:.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/.*",
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/.*"
    ],
    "greengrass:updateconnectivityinfo": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/things/.*"
    ],
    "greengrass:updateconnectordefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/.*"
    ],
    "greengrass:updatecoredefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/.*"
    ],
    "greengrass:updatedevicedefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/.*"
    ],
    "greengrass:updatefunctiondefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/.*"
    ],
    "greengrass:updategroup": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:updategroupcertificateconfiguration": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/.*"
    ],
    "greengrass:updateloggerdefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/.*"
    ],
    "greengrass:updateresourcedefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/.*"
    ],
    "greengrass:updatesubscriptiondefinition": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/.*"
    ],
    "greengrass:updatethingruntimeconfiguration": [
      "arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/things/.*"
    ],
    "groundstation:cancelcontact": [
      "arn:${Partition}:groundstation:${Region}:${Account}:contact/.*"
    ],
    "groundstation:deleteconfig": [
      "arn:${Partition}:groundstation:${Region}:${Account}:config/.*"
    ],
    "groundstation:deletedataflowendpointgroup": [
      "arn:${Partition}:groundstation:${Region}:${Account}:dataflow-endpoint-group/.*"
    ],
    "groundstation:deleteephemeris": [
      "arn:${Partition}:groundstation:${Region}:${Account}:ephemeris/.*"
    ],
    "groundstation:deletemissionprofile": [
      "arn:${Partition}:groundstation:${Region}:${Account}:mission-profile/.*"
    ],
    "groundstation:describecontact": [
      "arn:${Partition}:groundstation:${Region}:${Account}:contact/.*"
    ],
    "groundstation:describecontactversion": [
      "arn:${Partition}:groundstation:${Region}:${Account}:contact/.*"
    ],
    "groundstation:describeephemeris": [
      "arn:${Partition}:groundstation:${Region}:${Account}:ephemeris/.*"
    ],
    "groundstation:getagentconfiguration": [
      "arn:${Partition}:groundstation:${Region}:${Account}:agent/.*"
    ],
    "groundstation:getagenttaskresponseurl": [
      "arn:${Partition}:groundstation:${Region}:${Account}:agent/.*"
    ],
    "groundstation:getconfig": [
      "arn:${Partition}:groundstation:${Region}:${Account}:config/.*"
    ],
    "groundstation:getdataflowendpointgroup": [
      "arn:${Partition}:groundstation:${Region}:${Account}:dataflow-endpoint-group/.*"
    ],
    "groundstation:getmissionprofile": [
      "arn:${Partition}:groundstation:${Region}:${Account}:mission-profile/.*"
    ],
    "groundstation:getsatellite": [
      "arn:${Partition}:groundstation:${Region}:${Account}:satellite/.*"
    ],
    "groundstation:listantennas": [
      "arn:${Partition}:groundstation:${Region}:${Account}:groundstation:.*"
    ],
    "groundstation:listcontactversions": [
      "arn:${Partition}:groundstation:${Region}:${Account}:contact/.*"
    ],
    "groundstation:listgroundstationreservations": [
      "arn:${Partition}:groundstation:${Region}:${Account}:groundstation:.*"
    ],
    "groundstation:listtagsforresource": [
      "arn:${Partition}:groundstation:${Region}:${Account}:config/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:contact/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:dataflow-endpoint-group/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:mission-profile/.*"
    ],
    "groundstation:tagresource": [
      "arn:${Partition}:groundstation:${Region}:${Account}:config/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:contact/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:dataflow-endpoint-group/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:ephemeris/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:mission-profile/.*"
    ],
    "groundstation:untagresource": [
      "arn:${Partition}:groundstation:${Region}:${Account}:config/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:contact/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:dataflow-endpoint-group/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:ephemeris/.*",
      "arn:${Partition}:groundstation:${Region}:${Account}:mission-profile/.*"
    ],
    "groundstation:updateagentstatus": [
      "arn:${Partition}:groundstation:${Region}:${Account}:agent/.*"
    ],
    "groundstation:updateconfig": [
      "arn:${Partition}:groundstation:${Region}:${Account}:config/.*"
    ],
    "groundstation:updatecontact": [
      "arn:${Partition}:groundstation:${Region}:${Account}:contact/.*"
    ],
    "groundstation:updateephemeris": [
      "arn:${Partition}:groundstation:${Region}:${Account}:ephemeris/.*"
    ],
    "groundstation:updatemissionprofile": [
      "arn:${Partition}:groundstation:${Region}:${Account}:mission-profile/.*"
    ],
    "guardduty:createfilter": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:deletecustomdetectionruleassociation": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detection-rule/custom/.*"
    ],
    "guardduty:deletedetector": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:deletefilter": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:deleteipset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:deletemalwareprotectionplan": [
      "arn:${Partition}:guardduty:${Region}:${Account}:malware-protection-plan/.*"
    ],
    "guardduty:deletepublishingdestination": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:deletethreatentityset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:deletethreatintelset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:deletetrustedentityset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:describepublishingdestination": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:getcoveragestatistics": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:getcustomdetectionrule": [
      "arn:${Partition}:guardduty::aws:detection-rule/custom/.*"
    ],
    "guardduty:getcustomdetectionruleassociation": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detection-rule/custom/.*"
    ],
    "guardduty:getdetector": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:getfilter": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:getipset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:getmalwareprotectionplan": [
      "arn:${Partition}:guardduty:${Region}:${Account}:malware-protection-plan/.*"
    ],
    "guardduty:getthreatentityset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:getthreatintelset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:gettrustedentityset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:listcoverage": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:listtagsforresource": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detection-rule/custom/.*",
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*",
      "arn:${Partition}:guardduty:${Region}:${Account}:malware-protection-plan/.*"
    ],
    "guardduty:tagresource": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detection-rule/custom/.*",
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*",
      "arn:${Partition}:guardduty:${Region}:${Account}:malware-protection-plan/.*"
    ],
    "guardduty:untagresource": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detection-rule/custom/.*",
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*",
      "arn:${Partition}:guardduty:${Region}:${Account}:malware-protection-plan/.*"
    ],
    "guardduty:updatecustomdetectionruleassociation": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detection-rule/custom/.*"
    ],
    "guardduty:updatedetector": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:updatefilter": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:updateipset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:updatemalwareprotectionplan": [
      "arn:${Partition}:guardduty:${Region}:${Account}:malware-protection-plan/.*"
    ],
    "guardduty:updatepublishingdestination": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:updatethreatentityset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:updatethreatintelset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "guardduty:updatetrustedentityset": [
      "arn:${Partition}:guardduty:${Region}:${Account}:detector/.*"
    ],
    "health-agent:activatesubscription": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:cancelappointment": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:createagent": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:createintegration": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:createsession": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:createsubscription": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:deactivatesubscription": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:deleteagent": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:deletedomain": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:deleteintegration": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getagent": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getcareteamprovider": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getdomain": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getdomainanalytics": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getintegration": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getmedicalscribelisteningsession": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getpatient": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getpatientinsightsjob": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getpractitioner": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getsessioncontext": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:getsubscription": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:invokeagent": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listagents": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listappointmentslots": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listintegrations": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listpatientappointments": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listpatientinsurancecoverages": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listpatientmedications": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listproviders": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listsessionrecords": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listsubscriptions": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:listtagsforresource": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:matchpatient": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:publishagent": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:rescheduleappointment": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:resetpassword": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:scheduleappointment": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:startmedicalscribelisteningsession": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:startpatientinsightsjob": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:submitmedicationrenewal": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:tagresource": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:untagresource": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:updateagent": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:updateintegration": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health-agent:updatesession": [
      "arn:${Partition}:health-agent:${Region}:${Account}:domain/.*"
    ],
    "health:describeaffectedentities": [
      "arn:${Partition}:health:*::event/.*"
    ],
    "health:describeeventdetails": [
      "arn:${Partition}:health:*::event/.*"
    ],
    "healthlake:cancelfhirexportjobwithdelete": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:confirmattributionlist": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:createresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:deletedatatransformationprofile": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*"
    ],
    "healthlake:deletefhirdatastore": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:deleteresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:describefhirbulkdeletejob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:describefhirbulkmembermatchjob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:describefhirbulkpatchjob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:describefhirdatastore": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:describefhirexportjob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:describefhirexportjobwithget": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:describefhirimportjob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:expandvaluesetwithget": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:expandvaluesetwithpost": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:generatedocumentwithget": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:generatedocumentwithpost": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:getcapabilities": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:getdatatransformationprofile": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*"
    ],
    "healthlake:getexportedfile": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:gethistorybyresourceid": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:inquirepreauthclaim": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:listdatatransformationprofileversions": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*"
    ],
    "healthlake:listfhirexportjobs": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:listfhirimportjobs": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:listtagsforresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*",
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:lookupcodesystemwithget": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:lookupcodesystemwithpost": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:memberadd": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:membermatch": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:memberremove": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:patchresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:processbundle": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:publishdatatransformationprofile": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*"
    ],
    "healthlake:questionnairepackage": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:readresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:restorefhirdatastore": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:retrieveattributionstatus": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:searcheverything": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:searchwithget": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:searchwithpost": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:startdatatransformationjob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*"
    ],
    "healthlake:startfhirbulkdeletejob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:startfhirbulkmembermatchjob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:startfhirbulkpatchjob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:startfhirexportjob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:startfhirexportjobwithget": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:startfhirexportjobwithpost": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:startfhirimportjob": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:submitpreauthclaim": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:tagresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*",
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:transformdata": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*"
    ],
    "healthlake:translateconceptmapwithget": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:translateconceptmapwithpost": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:untagresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*",
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:updatedatatransformationprofile": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*"
    ],
    "healthlake:updatefhirdatastore": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:updateprofilewithagent": [
      "arn:${Partition}:healthlake:${Region}:${Account}:dataTransformationProfile/.*"
    ],
    "healthlake:updateresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:validateresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "healthlake:versionreadresource": [
      "arn:${Partition}:healthlake:${Region}:${Account}:datastore/fhir/.*"
    ],
    "honeycode:batchcreatetablerows": [
      "arn:${Partition}:honeycode:${Region}:${Account}:table:.*"
    ],
    "honeycode:batchdeletetablerows": [
      "arn:${Partition}:honeycode:${Region}:${Account}:table:.*"
    ],
    "honeycode:batchupdatetablerows": [
      "arn:${Partition}:honeycode:${Region}:${Account}:table:.*"
    ],
    "honeycode:batchupserttablerows": [
      "arn:${Partition}:honeycode:${Region}:${Account}:table:.*"
    ],
    "honeycode:describetabledataimportjob": [
      "arn:${Partition}:honeycode:${Region}:${Account}:table:.*"
    ],
    "honeycode:getscreendata": [
      "arn:${Partition}:honeycode:${Region}:${Account}:screen:.*"
    ],
    "honeycode:invokescreenautomation": [
      "arn:${Partition}:honeycode:${Region}:${Account}:screen-automation:.*"
    ],
    "honeycode:listtablecolumns": [
      "arn:${Partition}:honeycode:${Region}:${Account}:table:.*"
    ],
    "honeycode:listtablerows": [
      "arn:${Partition}:honeycode:${Region}:${Account}:table:.*"
    ],
    "honeycode:listtables": [
      "arn:${Partition}:honeycode:${Region}:${Account}:workbook:.*"
    ],
    "honeycode:querytablerows": [
      "arn:${Partition}:honeycode:${Region}:${Account}:table:.*"
    ],
    "honeycode:starttabledataimportjob": [
      "arn:${Partition}:honeycode:${Region}:${Account}:table:.*"
    ],
    "iam:acceptdelegationrequest": [
      "arn:${Partition}:iam::${Account}:delegation-request/.*"
    ],
    "iam:addclientidtoopenidconnectprovider": [
      "arn:${Partition}:iam::${Account}:oidc-provider/.*"
    ],
    "iam:addroletoinstanceprofile": [
      "arn:${Partition}:iam::${Account}:instance-profile/.*"
    ],
    "iam:addusertogroup": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:associatedelegationrequest": [
      "arn:${Partition}:iam::${Account}:delegation-request/.*"
    ],
    "iam:attachgrouppolicy": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:attachrolepolicy": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:attachuserpolicy": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:changepassword": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:createaccesskey": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:createdelegationrequest": [
      "arn:${Partition}:iam::${Account}:delegation-request/.*"
    ],
    "iam:creategroup": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:createinstanceprofile": [
      "arn:${Partition}:iam::${Account}:instance-profile/.*"
    ],
    "iam:createloginprofile": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:createopenidconnectprovider": [
      "arn:${Partition}:iam::${Account}:oidc-provider/.*"
    ],
    "iam:createpolicy": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:createpolicyversion": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:createrole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:createsamlprovider": [
      "arn:${Partition}:iam::${Account}:saml-provider/.*"
    ],
    "iam:createservicelinkedrole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:createservicespecificcredential": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:createuser": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:createvirtualmfadevice": [
      "arn:${Partition}:iam::${Account}:mfa/.*"
    ],
    "iam:deactivatemfadevice": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:deleteaccesskey": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:deletegroup": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:deletegrouppolicy": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:deleteinstanceprofile": [
      "arn:${Partition}:iam::${Account}:instance-profile/.*"
    ],
    "iam:deleteloginprofile": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:deleteopenidconnectprovider": [
      "arn:${Partition}:iam::${Account}:oidc-provider/.*"
    ],
    "iam:deletepolicy": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:deletepolicyversion": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:deleterole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:deleterolepermissionsboundary": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:deleterolepolicy": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:deletesamlprovider": [
      "arn:${Partition}:iam::${Account}:saml-provider/.*"
    ],
    "iam:deleteservercertificate": [
      "arn:${Partition}:iam::${Account}:server-certificate/.*"
    ],
    "iam:deleteservicelinkedrole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:deleteservicespecificcredential": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:deletesigningcertificate": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:deletesshpublickey": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:deleteuser": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:deleteuserpermissionsboundary": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:deleteuserpolicy": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:deletevirtualmfadevice": [
      "arn:${Partition}:iam::${Account}:mfa/.*",
      "arn:${Partition}:iam::${Account}:sms-mfa/.*"
    ],
    "iam:detachgrouppolicy": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:detachrolepolicy": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:detachuserpolicy": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:enablemfadevice": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:generateorganizationsaccessreport": [
      "arn:${Partition}:iam::${Account}:access-report/.*"
    ],
    "iam:generateservicelastaccesseddetails": [
      "arn:${Partition}:iam::${Account}:group/.*",
      "arn:${Partition}:iam::${Account}:policy/.*",
      "arn:${Partition}:iam::${Account}:role/.*",
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:getaccesskeylastused": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:getcontextkeysforprincipalpolicy": [
      "arn:${Partition}:iam::${Account}:group/.*",
      "arn:${Partition}:iam::${Account}:role/.*",
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:getdelegationrequest": [
      "arn:${Partition}:iam::${Account}:delegation-request/.*"
    ],
    "iam:getgroup": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:getgrouppolicy": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:gethumanreadablesummary": [
      "arn:${Partition}:iam::${Account}:delegation-request/.*"
    ],
    "iam:getinstanceprofile": [
      "arn:${Partition}:iam::${Account}:instance-profile/.*"
    ],
    "iam:getloginprofile": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:getmfadevice": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:getopenidconnectprovider": [
      "arn:${Partition}:iam::${Account}:oidc-provider/.*"
    ],
    "iam:getpolicy": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:getpolicyversion": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:getrole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:getrolepolicy": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:getroletemplateversion": [
      "arn:${Partition}:iam::aws:.*"
    ],
    "iam:getsamlprovider": [
      "arn:${Partition}:iam::${Account}:saml-provider/.*"
    ],
    "iam:getservercertificate": [
      "arn:${Partition}:iam::${Account}:server-certificate/.*"
    ],
    "iam:getservicelinkedroledeletionstatus": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:getsshpublickey": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:getuser": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:getuserpolicy": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listaccesskeys": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listattachedgrouppolicies": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:listattachedrolepolicies": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:listattacheduserpolicies": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listentitiesforpolicy": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:listgrouppolicies": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:listgroupsforuser": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listinstanceprofilesforrole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:listinstanceprofiletags": [
      "arn:${Partition}:iam::${Account}:instance-profile/.*"
    ],
    "iam:listmfadevices": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listmfadevicetags": [
      "arn:${Partition}:iam::${Account}:mfa/.*"
    ],
    "iam:listopenidconnectprovidertags": [
      "arn:${Partition}:iam::${Account}:oidc-provider/.*"
    ],
    "iam:listpoliciesgrantingserviceaccess": [
      "arn:${Partition}:iam::${Account}:group/.*",
      "arn:${Partition}:iam::${Account}:role/.*",
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listpolicytags": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:listpolicyversions": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:listrolepolicies": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:listroletags": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:listsamlprovidertags": [
      "arn:${Partition}:iam::${Account}:saml-provider/.*"
    ],
    "iam:listservercertificatetags": [
      "arn:${Partition}:iam::${Account}:server-certificate/.*"
    ],
    "iam:listservicespecificcredentials": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listsigningcertificates": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listsshpublickeys": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listuserpolicies": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:listusertags": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:passrole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:putgrouppolicy": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:putrolepermissionsboundary": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:putrolepolicy": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:putuserpermissionsboundary": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:putuserpolicy": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:rejectdelegationrequest": [
      "arn:${Partition}:iam::${Account}:delegation-request/.*"
    ],
    "iam:removeclientidfromopenidconnectprovider": [
      "arn:${Partition}:iam::${Account}:oidc-provider/.*"
    ],
    "iam:removerolefrominstanceprofile": [
      "arn:${Partition}:iam::${Account}:instance-profile/.*"
    ],
    "iam:removeuserfromgroup": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:resetservicespecificcredential": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:resyncmfadevice": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:senddelegationtoken": [
      "arn:${Partition}:iam::${Account}:delegation-request/.*"
    ],
    "iam:setdefaultpolicyversion": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:simulateprincipalpolicy": [
      "arn:${Partition}:iam::${Account}:group/.*",
      "arn:${Partition}:iam::${Account}:role/.*",
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:taginstanceprofile": [
      "arn:${Partition}:iam::${Account}:instance-profile/.*"
    ],
    "iam:tagmfadevice": [
      "arn:${Partition}:iam::${Account}:mfa/.*"
    ],
    "iam:tagopenidconnectprovider": [
      "arn:${Partition}:iam::${Account}:oidc-provider/.*"
    ],
    "iam:tagpolicy": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:tagrole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:tagsamlprovider": [
      "arn:${Partition}:iam::${Account}:saml-provider/.*"
    ],
    "iam:tagservercertificate": [
      "arn:${Partition}:iam::${Account}:server-certificate/.*"
    ],
    "iam:taguser": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:untaginstanceprofile": [
      "arn:${Partition}:iam::${Account}:instance-profile/.*"
    ],
    "iam:untagmfadevice": [
      "arn:${Partition}:iam::${Account}:mfa/.*"
    ],
    "iam:untagopenidconnectprovider": [
      "arn:${Partition}:iam::${Account}:oidc-provider/.*"
    ],
    "iam:untagpolicy": [
      "arn:${Partition}:iam::${Account}:policy/.*"
    ],
    "iam:untagrole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:untagsamlprovider": [
      "arn:${Partition}:iam::${Account}:saml-provider/.*"
    ],
    "iam:untagservercertificate": [
      "arn:${Partition}:iam::${Account}:server-certificate/.*"
    ],
    "iam:untaguser": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:updateaccesskey": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:updateassumerolepolicy": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:updategroup": [
      "arn:${Partition}:iam::${Account}:group/.*"
    ],
    "iam:updateloginprofile": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:updateopenidconnectproviderthumbprint": [
      "arn:${Partition}:iam::${Account}:oidc-provider/.*"
    ],
    "iam:updaterole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:updateroledescription": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "iam:updatesamlprovider": [
      "arn:${Partition}:iam::${Account}:saml-provider/.*"
    ],
    "iam:updateservercertificate": [
      "arn:${Partition}:iam::${Account}:server-certificate/.*"
    ],
    "iam:updateservicespecificcredential": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:updatesigningcertificate": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:updatesshpublickey": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:updateuser": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:uploadservercertificate": [
      "arn:${Partition}:iam::${Account}:server-certificate/.*"
    ],
    "iam:uploadsigningcertificate": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "iam:uploadsshpublickey": [
      "arn:${Partition}:iam::${Account}:user/.*"
    ],
    "identity-sync:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*"
    ],
    "identity-sync:createsyncfilter": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*"
    ],
    "identity-sync:createsynctarget": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*"
    ],
    "identity-sync:deletesyncfilter": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*"
    ],
    "identity-sync:deletesyncprofile": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*"
    ],
    "identity-sync:deletesynctarget": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*",
      "arn:${Partition}:identity-sync:${Region}:${Account}:target/.*"
    ],
    "identity-sync:getsyncprofile": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*"
    ],
    "identity-sync:getsynctarget": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*",
      "arn:${Partition}:identity-sync:${Region}:${Account}:target/.*"
    ],
    "identity-sync:listsyncfilters": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*"
    ],
    "identity-sync:startsync": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*"
    ],
    "identity-sync:stopsync": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*"
    ],
    "identity-sync:updatesynctarget": [
      "arn:${Partition}:identity-sync:${Region}:${Account}:profile/.*",
      "arn:${Partition}:identity-sync:${Region}:${Account}:target/.*"
    ],
    "identitystore:addregion": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:creategroup": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:creategroupmembership": [
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "identitystore:createuser": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:deletegroup": [
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:deletegroupmembership": [
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore:::membership/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "identitystore:deleteidentitystore": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:deleteuser": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "identitystore:describegroup": [
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:describegroupmembership": [
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore:::membership/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "identitystore:describeregion": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:describeuser": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "identitystore:getgroupid": [
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:getgroupmembershipid": [
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore:::membership/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "identitystore:getuserid": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "identitystore:ismemberingroups": [
      "arn:${Partition}:identitystore:::membership/*",
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "identitystore:listgroupmemberships": [
      "arn:${Partition}:identitystore:::membership/*",
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:listgroupmembershipsformember": [
      "arn:${Partition}:identitystore:::membership/*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "identitystore:listgroups": [
      "arn:${Partition}:identitystore:::group/*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:listregions": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:listusers": [
      "arn:${Partition}:identitystore:::user/*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:removeregion": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:reserveuser": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:updategroup": [
      "arn:${Partition}:identitystore:::group/.*",
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:updateidentitystore": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*"
    ],
    "identitystore:updateuser": [
      "arn:${Partition}:identitystore::${Account}:identitystore/.*",
      "arn:${Partition}:identitystore:::user/.*"
    ],
    "imagebuilder:cancelimagecreation": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:cancellifecycleexecution": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-execution/.*"
    ],
    "imagebuilder:createcomponent": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*"
    ],
    "imagebuilder:createcontainerrecipe": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:container-recipe/.*"
    ],
    "imagebuilder:createdistributionconfiguration": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:distribution-configuration/.*"
    ],
    "imagebuilder:createimage": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:createimagepipeline": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*"
    ],
    "imagebuilder:createimagerecipe": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-recipe/.*"
    ],
    "imagebuilder:createinfrastructureconfiguration": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:infrastructure-configuration/.*"
    ],
    "imagebuilder:createlifecyclepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-policy/.*"
    ],
    "imagebuilder:createworkflow": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow/.*"
    ],
    "imagebuilder:deletecomponent": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*"
    ],
    "imagebuilder:deletecontainerrecipe": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:container-recipe/.*"
    ],
    "imagebuilder:deletedistributionconfiguration": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:distribution-configuration/.*"
    ],
    "imagebuilder:deleteimage": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:deleteimagepipeline": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*"
    ],
    "imagebuilder:deleteimagerecipe": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-recipe/.*"
    ],
    "imagebuilder:deleteinfrastructureconfiguration": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:infrastructure-configuration/.*"
    ],
    "imagebuilder:deletelifecyclepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-policy/.*"
    ],
    "imagebuilder:deleteworkflow": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow/.*"
    ],
    "imagebuilder:distributeimage": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:getcomponent": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*"
    ],
    "imagebuilder:getcomponentpolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*"
    ],
    "imagebuilder:getcontainerrecipe": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:container-recipe/.*"
    ],
    "imagebuilder:getcontainerrecipepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:container-recipe/.*"
    ],
    "imagebuilder:getdistributionconfiguration": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:distribution-configuration/.*"
    ],
    "imagebuilder:getimage": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:getimagepipeline": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*"
    ],
    "imagebuilder:getimagepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:getimagerecipe": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-recipe/.*"
    ],
    "imagebuilder:getimagerecipepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-recipe/.*"
    ],
    "imagebuilder:getinfrastructureconfiguration": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:infrastructure-configuration/.*"
    ],
    "imagebuilder:getlifecycleexecution": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-execution/.*"
    ],
    "imagebuilder:getlifecyclepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-policy/.*"
    ],
    "imagebuilder:getmarketplaceresource": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*"
    ],
    "imagebuilder:getworkflow": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow/.*"
    ],
    "imagebuilder:getworkflowexecution": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow-execution/.*"
    ],
    "imagebuilder:getworkflowstepexecution": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow-step-execution/.*"
    ],
    "imagebuilder:importcomponent": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*"
    ],
    "imagebuilder:importdiskimage": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:importvmimage": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:listcomponentbuildversions": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*"
    ],
    "imagebuilder:listimagebuildversions": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:listimagepackages": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:listimagepipelineimages": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*"
    ],
    "imagebuilder:listimagescanfindingaggregations": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*"
    ],
    "imagebuilder:listimagescanfindings": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*"
    ],
    "imagebuilder:listlifecycleexecutionresources": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-execution/.*"
    ],
    "imagebuilder:listlifecycleexecutions": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-policy/.*"
    ],
    "imagebuilder:listtagsforresource": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:container-recipe/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:distribution-configuration/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-recipe/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:infrastructure-configuration/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-policy/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow/.*"
    ],
    "imagebuilder:listworkflowbuildversions": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow/.*"
    ],
    "imagebuilder:listworkflowexecutions": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:listworkflowstepexecutions": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow-execution/.*"
    ],
    "imagebuilder:putcomponentpolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*"
    ],
    "imagebuilder:putcontainerrecipepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:container-recipe/.*"
    ],
    "imagebuilder:putimagepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:putimagerecipepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-recipe/.*"
    ],
    "imagebuilder:retryimage": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:sendworkflowstepaction": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow-step-execution/.*"
    ],
    "imagebuilder:startimagepipelineexecution": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*"
    ],
    "imagebuilder:startresourcestateupdate": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*"
    ],
    "imagebuilder:tagresource": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:container-recipe/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:distribution-configuration/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-recipe/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:infrastructure-configuration/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-policy/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow/.*"
    ],
    "imagebuilder:untagresource": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:component/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:container-recipe/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:distribution-configuration/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-recipe/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:infrastructure-configuration/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-policy/.*",
      "arn:${Partition}:imagebuilder:${Region}:${Account}:workflow/.*"
    ],
    "imagebuilder:updatedistributionconfiguration": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:distribution-configuration/.*"
    ],
    "imagebuilder:updateimagepipeline": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:image-pipeline/.*"
    ],
    "imagebuilder:updateinfrastructureconfiguration": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:infrastructure-configuration/.*"
    ],
    "imagebuilder:updatelifecyclepolicy": [
      "arn:${Partition}:imagebuilder:${Region}:${Account}:lifecycle-policy/.*"
    ],
    "inspector2:createcisscanconfiguration": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*"
    ],
    "inspector2:createcodesecurityintegration": [
      "arn:${Partition}:inspector2:${Region}:${Account}:codesecurity-integration/.*"
    ],
    "inspector2:createcodesecurityscanconfiguration": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*"
    ],
    "inspector2:createconnector": [
      "arn:${Partition}:inspector2:${Region}:${Account}:connector/.*"
    ],
    "inspector2:createfilter": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*"
    ],
    "inspector2:deletecisscanconfiguration": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*"
    ],
    "inspector2:deletecodesecurityintegration": [
      "arn:${Partition}:inspector2:${Region}:${Account}:codesecurity-integration/.*"
    ],
    "inspector2:deletecodesecurityscanconfiguration": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*"
    ],
    "inspector2:deleteconnector": [
      "arn:${Partition}:inspector2:${Region}:${Account}:connector/.*"
    ],
    "inspector2:deletefilter": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*"
    ],
    "inspector2:tagresource": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*",
      "arn:${Partition}:inspector2:${Region}:${Account}:codesecurity-integration/.*",
      "arn:${Partition}:inspector2:${Region}:${Account}:connector/.*"
    ],
    "inspector2:untagresource": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*",
      "arn:${Partition}:inspector2:${Region}:${Account}:codesecurity-integration/.*",
      "arn:${Partition}:inspector2:${Region}:${Account}:connector/.*"
    ],
    "inspector2:updatecisscanconfiguration": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*"
    ],
    "inspector2:updatecodesecurityintegration": [
      "arn:${Partition}:inspector2:${Region}:${Account}:codesecurity-integration/.*"
    ],
    "inspector2:updatecodesecurityscanconfiguration": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*"
    ],
    "inspector2:updateconnector": [
      "arn:${Partition}:inspector2:${Region}:${Account}:connector/.*"
    ],
    "inspector2:updatefilter": [
      "arn:${Partition}:inspector2:${Region}:${Account}:owner/.*"
    ],
    "interconnect:createconnection": [
      "arn:${Partition}:interconnect:${Region}:${Account}:connection/.*"
    ],
    "interconnect:deleteconnection": [
      "arn:${Partition}:interconnect:${Region}:${Account}:connection/.*"
    ],
    "interconnect:getconnection": [
      "arn:${Partition}:interconnect:${Region}:${Account}:connection/.*"
    ],
    "interconnect:getenvironment": [
      "arn:${Partition}:interconnect:${Region}:${Account}:environment/.*"
    ],
    "interconnect:tagresource": [
      "arn:${Partition}:interconnect:${Region}:${Account}:connection/.*"
    ],
    "interconnect:untagresource": [
      "arn:${Partition}:interconnect:${Region}:${Account}:connection/.*"
    ],
    "interconnect:updateconnection": [
      "arn:${Partition}:interconnect:${Region}:${Account}:connection/.*"
    ],
    "internetmonitor:createmonitor": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:deletemonitor": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:gethealthevent": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:getinternetevent": [
      "arn:${Partition}:internetmonitor::${Account}:internet-event/.*"
    ],
    "internetmonitor:getmonitor": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:getqueryresults": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:getquerystatus": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:listhealthevents": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:listtagsforresource": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:startquery": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:stopquery": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:tagresource": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:untagresource": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "internetmonitor:updatemonitor": [
      "arn:${Partition}:internetmonitor:${Region}:${Account}:monitor/.*"
    ],
    "invoicing:deleteinvoiceunit": [
      "arn:${Partition}:invoicing::${Account}:invoice-unit/.*"
    ],
    "invoicing:getinvoiceunit": [
      "arn:${Partition}:invoicing::${Account}:invoice-unit/.*"
    ],
    "invoicing:listtagsforresource": [
      "arn:${Partition}:invoicing::${Account}:invoice-unit/.*",
      "arn:${Partition}:invoicing::${Account}:procurement-portal-preference/.*"
    ],
    "invoicing:tagresource": [
      "arn:${Partition}:invoicing::${Account}:invoice-unit/.*",
      "arn:${Partition}:invoicing::${Account}:procurement-portal-preference/.*"
    ],
    "invoicing:untagresource": [
      "arn:${Partition}:invoicing::${Account}:invoice-unit/.*",
      "arn:${Partition}:invoicing::${Account}:procurement-portal-preference/.*"
    ],
    "invoicing:updateinvoiceunit": [
      "arn:${Partition}:invoicing::${Account}:invoice-unit/.*"
    ],
    "iot:acceptcertificatetransfer": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:addthingtobillinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:addthingtothinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:associatesbomwithpackageversion": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:associatetargetswithjob": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:attachpolicy": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:attachprincipalpolicy": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:attachsecurityprofile": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*",
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:attachthingprincipal": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:cancelcertificatetransfer": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:canceljob": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*"
    ],
    "iot:canceljobexecution": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:closetunnel": [
      "arn:${Partition}:iot:${Region}:${Account}:tunnel/.*"
    ],
    "iot:confirmtopicruledestination": [
      "arn:${Partition}:iot:${Region}:${Account}:ruledestination/.*"
    ],
    "iot:connect": [
      "arn:${Partition}:iot:${Region}:${Account}:client/.*"
    ],
    "iot:createauthorizer": [
      "arn:${Partition}:iot:${Region}:${Account}:authorizer/.*"
    ],
    "iot:createbillinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*"
    ],
    "iot:createcertificateprovider": [
      "arn:${Partition}:iot:${Region}:${Account}:certificateprovider/.*"
    ],
    "iot:createcommand": [
      "arn:${Partition}:iot:${Region}:${Account}:command/.*"
    ],
    "iot:createcustommetric": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*"
    ],
    "iot:createdimension": [
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*"
    ],
    "iot:createdomainconfiguration": [
      "arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/.*"
    ],
    "iot:createdynamicthinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:createfleetmetric": [
      "arn:${Partition}:iot:${Region}:${Account}:fleetmetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:index/.*"
    ],
    "iot:createjob": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*",
      "arn:${Partition}:iot:${Region}:${Account}:jobtemplate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:package/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:createjobtemplate": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*",
      "arn:${Partition}:iot:${Region}:${Account}:jobtemplate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:createmitigationaction": [
      "arn:${Partition}:iot:${Region}:${Account}:mitigationaction/.*"
    ],
    "iot:createotaupdate": [
      "arn:${Partition}:iot:${Region}:${Account}:otaupdate/.*"
    ],
    "iot:createpackage": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:createpackageversion": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:createpolicy": [
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*"
    ],
    "iot:createpolicyversion": [
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*"
    ],
    "iot:createprovisioningclaim": [
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*"
    ],
    "iot:createprovisioningtemplate": [
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*"
    ],
    "iot:createprovisioningtemplateversion": [
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*"
    ],
    "iot:createrolealias": [
      "arn:${Partition}:iot:${Region}:${Account}:rolealias/.*"
    ],
    "iot:createscheduledaudit": [
      "arn:${Partition}:iot:${Region}:${Account}:scheduledaudit/.*"
    ],
    "iot:createsecurityprofile": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*",
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*"
    ],
    "iot:createstream": [
      "arn:${Partition}:iot:${Region}:${Account}:stream/.*"
    ],
    "iot:creatething": [
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:createthinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:createthingtype": [
      "arn:${Partition}:iot:${Region}:${Account}:thingtype/.*"
    ],
    "iot:createtopicrule": [
      "arn:${Partition}:iot:${Region}:${Account}:rule/.*"
    ],
    "iot:deleteauthorizer": [
      "arn:${Partition}:iot:${Region}:${Account}:authorizer/.*"
    ],
    "iot:deletebillinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*"
    ],
    "iot:deletecacertificate": [
      "arn:${Partition}:iot:${Region}:${Account}:cacert/.*"
    ],
    "iot:deletecertificate": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:deletecertificateprovider": [
      "arn:${Partition}:iot:${Region}:${Account}:certificateprovider/.*"
    ],
    "iot:deletecommand": [
      "arn:${Partition}:iot:${Region}:${Account}:command/.*"
    ],
    "iot:deletecommandexecution": [
      "arn:${Partition}:iot:${Region}:${Account}:client/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:deleteconnection": [
      "arn:${Partition}:iot:${Region}:${Account}:client/.*"
    ],
    "iot:deletecustommetric": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*"
    ],
    "iot:deletedimension": [
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*"
    ],
    "iot:deletedomainconfiguration": [
      "arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/.*"
    ],
    "iot:deletedynamicthinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:deletefleetmetric": [
      "arn:${Partition}:iot:${Region}:${Account}:fleetmetric/.*"
    ],
    "iot:deletejob": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*"
    ],
    "iot:deletejobexecution": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:deletejobtemplate": [
      "arn:${Partition}:iot:${Region}:${Account}:jobtemplate/.*"
    ],
    "iot:deletemitigationaction": [
      "arn:${Partition}:iot:${Region}:${Account}:mitigationaction/.*"
    ],
    "iot:deleteotaupdate": [
      "arn:${Partition}:iot:${Region}:${Account}:otaupdate/.*"
    ],
    "iot:deletepackage": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:deletepackageversion": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:deletepolicy": [
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*"
    ],
    "iot:deletepolicyversion": [
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*"
    ],
    "iot:deleteprovisioningtemplate": [
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*"
    ],
    "iot:deleteprovisioningtemplateversion": [
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*"
    ],
    "iot:deleterolealias": [
      "arn:${Partition}:iot:${Region}:${Account}:rolealias/.*"
    ],
    "iot:deletescheduledaudit": [
      "arn:${Partition}:iot:${Region}:${Account}:scheduledaudit/.*"
    ],
    "iot:deletesecurityprofile": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*",
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*"
    ],
    "iot:deletestream": [
      "arn:${Partition}:iot:${Region}:${Account}:stream/.*"
    ],
    "iot:deletething": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:deletethinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:deletethingshadow": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:deletethingtype": [
      "arn:${Partition}:iot:${Region}:${Account}:thingtype/.*"
    ],
    "iot:deletetopicrule": [
      "arn:${Partition}:iot:${Region}:${Account}:rule/.*"
    ],
    "iot:deletetopicruledestination": [
      "arn:${Partition}:iot:${Region}:${Account}:ruledestination/.*"
    ],
    "iot:deprecatethingtype": [
      "arn:${Partition}:iot:${Region}:${Account}:thingtype/.*"
    ],
    "iot:describeauthorizer": [
      "arn:${Partition}:iot:${Region}:${Account}:authorizer/.*"
    ],
    "iot:describebillinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*"
    ],
    "iot:describecacertificate": [
      "arn:${Partition}:iot:${Region}:${Account}:cacert/.*"
    ],
    "iot:describecertificate": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:describecertificateprovider": [
      "arn:${Partition}:iot:${Region}:${Account}:certificateprovider/.*"
    ],
    "iot:describecustommetric": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*"
    ],
    "iot:describedimension": [
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*"
    ],
    "iot:describedomainconfiguration": [
      "arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/.*"
    ],
    "iot:describefleetmetric": [
      "arn:${Partition}:iot:${Region}:${Account}:fleetmetric/.*"
    ],
    "iot:describeindex": [
      "arn:${Partition}:iot:${Region}:${Account}:index/.*"
    ],
    "iot:describejob": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*"
    ],
    "iot:describejobexecution": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:describejobtemplate": [
      "arn:${Partition}:iot:${Region}:${Account}:jobtemplate/.*"
    ],
    "iot:describemanagedjobtemplate": [
      "arn:${Partition}:iot:${Region}:${Account}:jobtemplate/.*"
    ],
    "iot:describemitigationaction": [
      "arn:${Partition}:iot:${Region}:${Account}:mitigationaction/.*"
    ],
    "iot:describeprovisioningtemplate": [
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*"
    ],
    "iot:describeprovisioningtemplateversion": [
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*"
    ],
    "iot:describerolealias": [
      "arn:${Partition}:iot:${Region}:${Account}:rolealias/.*"
    ],
    "iot:describescheduledaudit": [
      "arn:${Partition}:iot:${Region}:${Account}:scheduledaudit/.*"
    ],
    "iot:describesecurityprofile": [
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*"
    ],
    "iot:describestream": [
      "arn:${Partition}:iot:${Region}:${Account}:stream/.*"
    ],
    "iot:describething": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:describethinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:describethingtype": [
      "arn:${Partition}:iot:${Region}:${Account}:thingtype/.*"
    ],
    "iot:describetunnel": [
      "arn:${Partition}:iot:${Region}:${Account}:tunnel/.*"
    ],
    "iot:detachpolicy": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:detachprincipalpolicy": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:detachsecurityprofile": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*",
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:detachthingprincipal": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:disabletopicrule": [
      "arn:${Partition}:iot:${Region}:${Account}:rule/.*"
    ],
    "iot:disassociatesbomfrompackageversion": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:enabletopicrule": [
      "arn:${Partition}:iot:${Region}:${Account}:rule/.*"
    ],
    "iot:getbehaviormodeltrainingsummaries": [
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*"
    ],
    "iot:getbucketsaggregation": [
      "arn:${Partition}:iot:${Region}:${Account}:index/.*"
    ],
    "iot:getcardinality": [
      "arn:${Partition}:iot:${Region}:${Account}:index/.*"
    ],
    "iot:getcommand": [
      "arn:${Partition}:iot:${Region}:${Account}:command/.*"
    ],
    "iot:getcommandexecution": [
      "arn:${Partition}:iot:${Region}:${Account}:client/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:getconnection": [
      "arn:${Partition}:iot:${Region}:${Account}:client/.*"
    ],
    "iot:geteffectivepolicies": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:getjobdocument": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*"
    ],
    "iot:getotaupdate": [
      "arn:${Partition}:iot:${Region}:${Account}:otaupdate/.*"
    ],
    "iot:getpackage": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:getpackageversion": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:getpercentiles": [
      "arn:${Partition}:iot:${Region}:${Account}:index/.*"
    ],
    "iot:getpolicy": [
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*"
    ],
    "iot:getpolicyversion": [
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*"
    ],
    "iot:getretainedmessage": [
      "arn:${Partition}:iot:${Region}:${Account}:topic/.*"
    ],
    "iot:getstatistics": [
      "arn:${Partition}:iot:${Region}:${Account}:index/.*"
    ],
    "iot:getthingconnectivitydata": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:getthingshadow": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:gettopicrule": [
      "arn:${Partition}:iot:${Region}:${Account}:rule/.*"
    ],
    "iot:gettopicruledestination": [
      "arn:${Partition}:iot:${Region}:${Account}:ruledestination/.*"
    ],
    "iot:listactiveviolations": [
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:listcommandexecutions": [
      "arn:${Partition}:iot:${Region}:${Account}:client/.*",
      "arn:${Partition}:iot:${Region}:${Account}:command/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:listdetectmitigationactionsexecutions": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:listjobexecutionsforjob": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*"
    ],
    "iot:listjobexecutionsforthing": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:listmetricvalues": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:listnamedshadowsforthing": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:listpolicyversions": [
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*"
    ],
    "iot:listprincipalthings": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:listprincipalthingsv2": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:listprovisioningtemplateversions": [
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*"
    ],
    "iot:listsbomvalidationresults": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:listsecurityprofiles": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*"
    ],
    "iot:listsecurityprofilesfortarget": [
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:listsubscriptions": [
      "arn:${Partition}:iot:${Region}:${Account}:client/.*"
    ],
    "iot:listtagsforresource": [
      "arn:${Partition}:iot:${Region}:${Account}:authorizer/.*",
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*",
      "arn:${Partition}:iot:${Region}:${Account}:cacert/.*",
      "arn:${Partition}:iot:${Region}:${Account}:certificateprovider/.*",
      "arn:${Partition}:iot:${Region}:${Account}:command/.*",
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*",
      "arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*",
      "arn:${Partition}:iot:${Region}:${Account}:fleetmetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:job/.*",
      "arn:${Partition}:iot:${Region}:${Account}:jobtemplate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:mitigationaction/.*",
      "arn:${Partition}:iot:${Region}:${Account}:otaupdate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*",
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:rolealias/.*",
      "arn:${Partition}:iot:${Region}:${Account}:rule/.*",
      "arn:${Partition}:iot:${Region}:${Account}:scheduledaudit/.*",
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*",
      "arn:${Partition}:iot:${Region}:${Account}:stream/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thingtype/.*"
    ],
    "iot:listtargetsforpolicy": [
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*"
    ],
    "iot:listtargetsforsecurityprofile": [
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*"
    ],
    "iot:listthinggroupsforthing": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:listthingprincipals": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:listthingprincipalsv2": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:listthingsinbillinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*"
    ],
    "iot:listthingsinthinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:listviolationevents": [
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:publish": [
      "arn:${Partition}:iot:${Region}:${Account}:topic/.*"
    ],
    "iot:receive": [
      "arn:${Partition}:iot:${Region}:${Account}:topic/.*"
    ],
    "iot:rejectcertificatetransfer": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:removethingfrombillinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:removethingfromthinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:replacetopicrule": [
      "arn:${Partition}:iot:${Region}:${Account}:rule/.*"
    ],
    "iot:retainpublish": [
      "arn:${Partition}:iot:${Region}:${Account}:topic/.*"
    ],
    "iot:rotatetunnelaccesstoken": [
      "arn:${Partition}:iot:${Region}:${Account}:tunnel/.*"
    ],
    "iot:searchindex": [
      "arn:${Partition}:iot:${Region}:${Account}:index/.*"
    ],
    "iot:senddirectmessage": [
      "arn:${Partition}:iot:${Region}:${Account}:client/.*"
    ],
    "iot:setdefaultauthorizer": [
      "arn:${Partition}:iot:${Region}:${Account}:authorizer/.*"
    ],
    "iot:setdefaultpolicyversion": [
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*"
    ],
    "iot:startcommandexecution": [
      "arn:${Partition}:iot:${Region}:${Account}:client/.*",
      "arn:${Partition}:iot:${Region}:${Account}:command/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:startdetectmitigationactionstask": [
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*"
    ],
    "iot:subscribe": [
      "arn:${Partition}:iot:${Region}:${Account}:topicfilter/.*"
    ],
    "iot:tagresource": [
      "arn:${Partition}:iot:${Region}:${Account}:authorizer/.*",
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*",
      "arn:${Partition}:iot:${Region}:${Account}:cacert/.*",
      "arn:${Partition}:iot:${Region}:${Account}:certificateprovider/.*",
      "arn:${Partition}:iot:${Region}:${Account}:command/.*",
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*",
      "arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*",
      "arn:${Partition}:iot:${Region}:${Account}:fleetmetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:job/.*",
      "arn:${Partition}:iot:${Region}:${Account}:jobtemplate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:mitigationaction/.*",
      "arn:${Partition}:iot:${Region}:${Account}:otaupdate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:package/.*",
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*",
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:rolealias/.*",
      "arn:${Partition}:iot:${Region}:${Account}:rule/.*",
      "arn:${Partition}:iot:${Region}:${Account}:scheduledaudit/.*",
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*",
      "arn:${Partition}:iot:${Region}:${Account}:stream/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thingtype/.*"
    ],
    "iot:testauthorization": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:testinvokeauthorizer": [
      "arn:${Partition}:iot:${Region}:${Account}:authorizer/.*"
    ],
    "iot:transfercertificate": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:untagresource": [
      "arn:${Partition}:iot:${Region}:${Account}:authorizer/.*",
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*",
      "arn:${Partition}:iot:${Region}:${Account}:cacert/.*",
      "arn:${Partition}:iot:${Region}:${Account}:certificateprovider/.*",
      "arn:${Partition}:iot:${Region}:${Account}:command/.*",
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*",
      "arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*",
      "arn:${Partition}:iot:${Region}:${Account}:fleetmetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:job/.*",
      "arn:${Partition}:iot:${Region}:${Account}:jobtemplate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:mitigationaction/.*",
      "arn:${Partition}:iot:${Region}:${Account}:otaupdate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:package/.*",
      "arn:${Partition}:iot:${Region}:${Account}:policy/.*",
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*",
      "arn:${Partition}:iot:${Region}:${Account}:rolealias/.*",
      "arn:${Partition}:iot:${Region}:${Account}:rule/.*",
      "arn:${Partition}:iot:${Region}:${Account}:scheduledaudit/.*",
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*",
      "arn:${Partition}:iot:${Region}:${Account}:stream/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thingtype/.*"
    ],
    "iot:updateauthorizer": [
      "arn:${Partition}:iot:${Region}:${Account}:authorizer/.*"
    ],
    "iot:updatebillinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:billinggroup/.*"
    ],
    "iot:updatecacertificate": [
      "arn:${Partition}:iot:${Region}:${Account}:cacert/.*"
    ],
    "iot:updatecertificate": [
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iot:updatecertificateprovider": [
      "arn:${Partition}:iot:${Region}:${Account}:certificateprovider/.*"
    ],
    "iot:updatecommand": [
      "arn:${Partition}:iot:${Region}:${Account}:command/.*"
    ],
    "iot:updatecustommetric": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*"
    ],
    "iot:updatedimension": [
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*"
    ],
    "iot:updatedomainconfiguration": [
      "arn:${Partition}:iot:${Region}:${Account}:domainconfiguration/.*"
    ],
    "iot:updatedynamicthinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:updatefleetmetric": [
      "arn:${Partition}:iot:${Region}:${Account}:fleetmetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:index/.*"
    ],
    "iot:updatejob": [
      "arn:${Partition}:iot:${Region}:${Account}:job/.*"
    ],
    "iot:updatemitigationaction": [
      "arn:${Partition}:iot:${Region}:${Account}:mitigationaction/.*"
    ],
    "iot:updatepackage": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:updatepackageversion": [
      "arn:${Partition}:iot:${Region}:${Account}:package/.*"
    ],
    "iot:updateprovisioningtemplate": [
      "arn:${Partition}:iot:${Region}:${Account}:provisioningtemplate/.*"
    ],
    "iot:updaterolealias": [
      "arn:${Partition}:iot:${Region}:${Account}:rolealias/.*"
    ],
    "iot:updatescheduledaudit": [
      "arn:${Partition}:iot:${Region}:${Account}:scheduledaudit/.*"
    ],
    "iot:updatesecurityprofile": [
      "arn:${Partition}:iot:${Region}:${Account}:custommetric/.*",
      "arn:${Partition}:iot:${Region}:${Account}:dimension/.*",
      "arn:${Partition}:iot:${Region}:${Account}:securityprofile/.*"
    ],
    "iot:updatestream": [
      "arn:${Partition}:iot:${Region}:${Account}:stream/.*"
    ],
    "iot:updatething": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:updatethinggroup": [
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:updatethinggroupsforthing": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thinggroup/.*"
    ],
    "iot:updatethingshadow": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iot:updatethingtype": [
      "arn:${Partition}:iot:${Region}:${Account}:thingtype/.*"
    ],
    "iot:updatetopicruledestination": [
      "arn:${Partition}:iot:${Region}:${Account}:ruledestination/.*"
    ],
    "iotanalytics:batchputmessage": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:channel/.*"
    ],
    "iotanalytics:cancelpipelinereprocessing": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/.*"
    ],
    "iotanalytics:createchannel": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:channel/.*"
    ],
    "iotanalytics:createdataset": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*"
    ],
    "iotanalytics:createdatasetcontent": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*"
    ],
    "iotanalytics:createdatastore": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:datastore/.*"
    ],
    "iotanalytics:createpipeline": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/.*"
    ],
    "iotanalytics:deletechannel": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:channel/.*"
    ],
    "iotanalytics:deletedataset": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*"
    ],
    "iotanalytics:deletedatasetcontent": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*"
    ],
    "iotanalytics:deletedatastore": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:datastore/.*"
    ],
    "iotanalytics:deletepipeline": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/.*"
    ],
    "iotanalytics:describechannel": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:channel/.*"
    ],
    "iotanalytics:describedataset": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*"
    ],
    "iotanalytics:describedatastore": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:datastore/.*"
    ],
    "iotanalytics:describepipeline": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/.*"
    ],
    "iotanalytics:getdatasetcontent": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*"
    ],
    "iotanalytics:listdatasetcontents": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*"
    ],
    "iotanalytics:listtagsforresource": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:channel/.*",
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotanalytics:${Region}:${Account}:datastore/.*",
      "arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/.*"
    ],
    "iotanalytics:samplechanneldata": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:channel/.*"
    ],
    "iotanalytics:startpipelinereprocessing": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/.*"
    ],
    "iotanalytics:tagresource": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:channel/.*",
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotanalytics:${Region}:${Account}:datastore/.*",
      "arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/.*"
    ],
    "iotanalytics:untagresource": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:channel/.*",
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotanalytics:${Region}:${Account}:datastore/.*",
      "arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/.*"
    ],
    "iotanalytics:updatechannel": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:channel/.*"
    ],
    "iotanalytics:updatedataset": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:dataset/.*"
    ],
    "iotanalytics:updatedatastore": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:datastore/.*"
    ],
    "iotanalytics:updatepipeline": [
      "arn:${Partition}:iotanalytics:${Region}:${Account}:pipeline/.*"
    ],
    "iotdeviceadvisor:deletesuitedefinition": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suitedefinition/.*"
    ],
    "iotdeviceadvisor:getsuitedefinition": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suitedefinition/.*"
    ],
    "iotdeviceadvisor:getsuiterun": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suiterun/.*"
    ],
    "iotdeviceadvisor:getsuiterunreport": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suiterun/.*"
    ],
    "iotdeviceadvisor:listsuiteruns": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suitedefinition/.*"
    ],
    "iotdeviceadvisor:listtagsforresource": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suitedefinition/.*",
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suiterun/.*"
    ],
    "iotdeviceadvisor:stopsuiterun": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suiterun/.*"
    ],
    "iotdeviceadvisor:tagresource": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suitedefinition/.*",
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suiterun/.*"
    ],
    "iotdeviceadvisor:untagresource": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suitedefinition/.*",
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suiterun/.*"
    ],
    "iotdeviceadvisor:updatesuitedefinition": [
      "arn:${Partition}:iotdeviceadvisor:${Region}:${Account}:suitedefinition/.*"
    ],
    "iotevents:batchacknowledgealarm": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:batchdeletedetector": [
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*"
    ],
    "iotevents:batchdisablealarm": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:batchenablealarm": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:batchputmessage": [
      "arn:${Partition}:iotevents:${Region}:${Account}:input/.*"
    ],
    "iotevents:batchresetalarm": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:batchsnoozealarm": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:batchupdatedetector": [
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*"
    ],
    "iotevents:createalarmmodel": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:createdetectormodel": [
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*"
    ],
    "iotevents:createinput": [
      "arn:${Partition}:iotevents:${Region}:${Account}:input/.*"
    ],
    "iotevents:deletealarmmodel": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:deletedetectormodel": [
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*"
    ],
    "iotevents:deleteinput": [
      "arn:${Partition}:iotevents:${Region}:${Account}:input/.*"
    ],
    "iotevents:describealarm": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:describealarmmodel": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:describedetector": [
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*"
    ],
    "iotevents:describedetectormodel": [
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*"
    ],
    "iotevents:describeinput": [
      "arn:${Partition}:iotevents:${Region}:${Account}:input/.*"
    ],
    "iotevents:listalarmmodelversions": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:listalarms": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:listdetectormodelversions": [
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*"
    ],
    "iotevents:listdetectors": [
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*"
    ],
    "iotevents:listtagsforresource": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*",
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*",
      "arn:${Partition}:iotevents:${Region}:${Account}:input/.*"
    ],
    "iotevents:tagresource": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*",
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*",
      "arn:${Partition}:iotevents:${Region}:${Account}:input/.*"
    ],
    "iotevents:untagresource": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*",
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*",
      "arn:${Partition}:iotevents:${Region}:${Account}:input/.*"
    ],
    "iotevents:updatealarmmodel": [
      "arn:${Partition}:iotevents:${Region}:${Account}:alarmModel/.*"
    ],
    "iotevents:updatedetectormodel": [
      "arn:${Partition}:iotevents:${Region}:${Account}:detectorModel/.*"
    ],
    "iotevents:updateinput": [
      "arn:${Partition}:iotevents:${Region}:${Account}:input/.*"
    ],
    "iotevents:updateinputrouting": [
      "arn:${Partition}:iotevents:${Region}:${Account}:input/.*"
    ],
    "iotfleethub:deleteapplication": [
      "arn:${Partition}:iotfleethub:${Region}:${Account}:application/.*"
    ],
    "iotfleethub:describeapplication": [
      "arn:${Partition}:iotfleethub:${Region}:${Account}:application/.*"
    ],
    "iotfleethub:listtagsforresource": [
      "arn:${Partition}:iotfleethub:${Region}:${Account}:application/.*"
    ],
    "iotfleethub:tagresource": [
      "arn:${Partition}:iotfleethub:${Region}:${Account}:application/.*"
    ],
    "iotfleethub:untagresource": [
      "arn:${Partition}:iotfleethub:${Region}:${Account}:application/.*"
    ],
    "iotfleethub:updateapplication": [
      "arn:${Partition}:iotfleethub:${Region}:${Account}:application/.*"
    ],
    "iotfleetwise:associatevehiclefleet": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:createcampaign": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:createdecodermanifest": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*"
    ],
    "iotfleetwise:createfleet": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*"
    ],
    "iotfleetwise:createmodelmanifest": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*"
    ],
    "iotfleetwise:createsignalcatalog": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*"
    ],
    "iotfleetwise:createstatetemplate": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/.*"
    ],
    "iotfleetwise:createvehicle": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:deletecampaign": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:campaign/.*"
    ],
    "iotfleetwise:deletedecodermanifest": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*"
    ],
    "iotfleetwise:deletefleet": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*"
    ],
    "iotfleetwise:deletemodelmanifest": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*"
    ],
    "iotfleetwise:deletesignalcatalog": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*"
    ],
    "iotfleetwise:deletestatetemplate": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/.*"
    ],
    "iotfleetwise:deletevehicle": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:disassociatevehiclefleet": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:generatecommandpayload": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:getcampaign": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:campaign/.*"
    ],
    "iotfleetwise:getdecodermanifest": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*"
    ],
    "iotfleetwise:getfleet": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*"
    ],
    "iotfleetwise:getmodelmanifest": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*"
    ],
    "iotfleetwise:getsignalcatalog": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*"
    ],
    "iotfleetwise:getstatetemplate": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/.*"
    ],
    "iotfleetwise:getvehicle": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:getvehiclestatus": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:importdecodermanifest": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*"
    ],
    "iotfleetwise:importsignalcatalog": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*"
    ],
    "iotfleetwise:listdecodermanifestnetworkinterfaces": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*"
    ],
    "iotfleetwise:listdecodermanifestsignals": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*"
    ],
    "iotfleetwise:listfleetsforvehicle": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:listmodelmanifestnodes": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*"
    ],
    "iotfleetwise:listsignalcatalognodes": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*"
    ],
    "iotfleetwise:listtagsforresource": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:listvehiclesinfleet": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*"
    ],
    "iotfleetwise:tagresource": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:untagresource": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotfleetwise:updatecampaign": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:campaign/.*"
    ],
    "iotfleetwise:updatedecodermanifest": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*"
    ],
    "iotfleetwise:updatefleet": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:fleet/.*"
    ],
    "iotfleetwise:updatemodelmanifest": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*"
    ],
    "iotfleetwise:updatesignalcatalog": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:signal-catalog/.*"
    ],
    "iotfleetwise:updatestatetemplate": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/.*"
    ],
    "iotfleetwise:updatevehicle": [
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:decoder-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:model-manifest/.*",
      "arn:${Partition}:iotfleetwise:${Region}:${Account}:vehicle/.*"
    ],
    "iotjobsdata:describejobexecution": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iotjobsdata:getpendingjobexecutions": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iotjobsdata:startnextpendingjobexecution": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iotjobsdata:updatejobexecution": [
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iotmanagedintegrations:createmanagedthing": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:credential-locker/.*"
    ],
    "iotmanagedintegrations:deleteaccountassociation": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*"
    ],
    "iotmanagedintegrations:deletecredentiallocker": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:credential-locker/.*"
    ],
    "iotmanagedintegrations:deletemanagedthing": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:deleteotatask": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:ota-task/.*"
    ],
    "iotmanagedintegrations:deleteprovisioningprofile": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:provisioning-profile/.*"
    ],
    "iotmanagedintegrations:deregisteraccountassociation": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:getaccountassociation": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*"
    ],
    "iotmanagedintegrations:getcredentiallocker": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:credential-locker/.*"
    ],
    "iotmanagedintegrations:getmanagedthing": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:getmanagedthingcapabilities": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:getmanagedthingcertificate": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:getmanagedthingconnectivitydata": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:getmanagedthingmetadata": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:getmanagedthingstate": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:getotatask": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:ota-task/.*"
    ],
    "iotmanagedintegrations:getprovisioningprofile": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:provisioning-profile/.*"
    ],
    "iotmanagedintegrations:listmanagedthingschemas": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:listotataskexecutions": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:ota-task/.*"
    ],
    "iotmanagedintegrations:listtagsforresource": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:credential-locker/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:ota-task/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:provisioning-profile/.*"
    ],
    "iotmanagedintegrations:registeraccountassociation": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:sendmanagedthingcommand": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:startaccountassociationrefresh": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*"
    ],
    "iotmanagedintegrations:startdevicediscovery": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:tagresource": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:credential-locker/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:ota-task/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:provisioning-profile/.*"
    ],
    "iotmanagedintegrations:untagresource": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:credential-locker/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:ota-task/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:provisioning-profile/.*"
    ],
    "iotmanagedintegrations:updateaccountassociation": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:account-association/.*"
    ],
    "iotmanagedintegrations:updatemanagedthing": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:credential-locker/.*",
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/.*"
    ],
    "iotmanagedintegrations:updateotatask": [
      "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:ota-task/.*"
    ],
    "iotsitewise:associateassets": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:associatetimeseriestoassetproperty": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:batchassociatedatasegmentstodataset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:batchassociateprojectassets": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:batchdeletedatasetdatasegments": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:batchdisassociatedatasegmentsfromdataset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:batchdisassociateprojectassets": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:batchgetassetpropertyaggregates": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:batchgetassetpropertyvalue": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:batchgetassetpropertyvaluehistory": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:batchputassetpropertyvalue": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:cancelenrichmentjob": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:cancelpipelineexecution": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:cancelquery": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:createaccesspolicy": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:createasset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:createassetmodelcompositemodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:createbulkimportjob": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:createcomputationmodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:createdashboard": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:createdataset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:createdatasetexportjob": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:createenrichmentjob": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:createproject": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*"
    ],
    "iotsitewise:deleteaccesspolicy": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:access-policy/.*"
    ],
    "iotsitewise:deleteapplication": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:deleteasset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:deleteassetmodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:deleteassetmodelcompositemodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:deleteassetmodelinterfacerelationship": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:deletecomputationmodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*"
    ],
    "iotsitewise:deletedashboard": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dashboard/.*"
    ],
    "iotsitewise:deletedataset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:deletegateway": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:gateway/.*"
    ],
    "iotsitewise:deletepipeline": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:deleteportal": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*"
    ],
    "iotsitewise:deleteproject": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:deletetask": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:deletetimeseries": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:deleteworkspace": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describeaccesspolicy": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:access-policy/.*"
    ],
    "iotsitewise:describeaction": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*"
    ],
    "iotsitewise:describeapplication": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describeasset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:describeassetcompositemodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:describeassetmodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:describeassetmodelcompositemodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:describeassetmodelinterfacerelationship": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:describeassetproperty": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:describebulkimportjob": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describecomputationmodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*"
    ],
    "iotsitewise:describecomputationmodelexecutionsummary": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*"
    ],
    "iotsitewise:describedashboard": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dashboard/.*"
    ],
    "iotsitewise:describedataset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describedatasetexportjob": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describeenrichmentjob": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describegateway": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:gateway/.*"
    ],
    "iotsitewise:describegatewaycapabilityconfiguration": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:gateway/.*"
    ],
    "iotsitewise:describepipeline": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describepipelineexecution": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describeportal": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*"
    ],
    "iotsitewise:describeproject": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:describequery": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describesearch": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describetask": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describetimeseries": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:describeworkspace": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:disassociateassets": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:disassociatetimeseriesfromassetproperty": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:executeaction": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*"
    ],
    "iotsitewise:getassetpropertyaggregates": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:getassetpropertyvalue": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:getassetpropertyvaluehistory": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:getcapturedata": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:getinterpolatedassetpropertyvalues": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:getqueryresults": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:getsearchresults": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listaccesspolicies": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:listactions": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*"
    ],
    "iotsitewise:listassetmodelcompositemodels": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:listassetmodelproperties": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:listassetproperties": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:listassetrelationships": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:listassets": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:listassociatedassets": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:listbulkimportjobs": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listcompositionrelationships": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:listcomputationmodeldatabindingusages": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:listcomputationmodelresolvetoresources": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*"
    ],
    "iotsitewise:listdashboards": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:listdatasetdatasegmentrelationships": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listdatasetdatasegments": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listdatasetexportjobs": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listdatasets": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listenrichmentjobs": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listexecutions": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*"
    ],
    "iotsitewise:listinterfacerelationships": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:listpipelineexecutions": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listprojectassets": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:listprojects": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*"
    ],
    "iotsitewise:listqueries": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listsearches": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:listtagsforresource": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:access-policy/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:listtimeseries": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:putassetmodelinterfacerelationship": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:startpipelineexecution": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:startquery": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:startsearch": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:tagresource": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:access-policy/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:untagresource": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:access-policy/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/.*"
    ],
    "iotsitewise:updateaccesspolicy": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:access-policy/.*"
    ],
    "iotsitewise:updateasset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:updateassetmodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:updateassetmodelcompositemodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:updateassetmodelpropertyrouting": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*"
    ],
    "iotsitewise:updateassetproperty": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*"
    ],
    "iotsitewise:updatecomputationmodel": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:asset-model/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:computation-model/.*"
    ],
    "iotsitewise:updatedashboard": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dashboard/.*"
    ],
    "iotsitewise:updatedataset": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:updategateway": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:gateway/.*"
    ],
    "iotsitewise:updategatewaycapabilityconfiguration": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:gateway/.*"
    ],
    "iotsitewise:updatepipeline": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:updateportal": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/.*"
    ],
    "iotsitewise:updateproject": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:project/.*"
    ],
    "iotsitewise:updatetask": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iotsitewise:updateworkspace": [
      "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:batchputpropertyvalues": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:cancelmetadatatransferjob": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:metadata-transfer-job/.*"
    ],
    "iottwinmaker:createcomponenttype": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:createentity": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:createscene": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:createsyncjob": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:deletecomponenttype": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:deleteentity": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:deletescene": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:deletesyncjob": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:deleteworkspace": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:executequery": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:getcomponenttype": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:getentity": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:getmetadatatransferjob": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:metadata-transfer-job/.*"
    ],
    "iottwinmaker:getpropertyvalue": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:getpropertyvaluehistory": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:getscene": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:getsyncjob": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:getworkspace": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:listcomponents": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:listcomponenttypes": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:listentities": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:listproperties": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:listscenes": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:listsyncjobs": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:listsyncresources": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:listtagsforresource": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:tagresource": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:untagresource": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:updatecomponenttype": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:updateentity": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:updatescene": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iottwinmaker:updateworkspace": [
      "arn:${Partition}:iottwinmaker:${Region}:${Account}:workspace/.*"
    ],
    "iotwireless:associatemulticastgroupwithfuotatask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:associatewirelessdevicewithfuotatask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:associatewirelessdevicewithmulticastgroup": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:associatewirelessdevicewiththing": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iotwireless:associatewirelessgatewaywithcertificate": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*",
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iotwireless:associatewirelessgatewaywiththing": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iotwireless:cancelmulticastgroupsession": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:createnetworkanalyzerconfiguration": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:createwirelessdevice": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:DeviceProfile/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:ServiceProfile/.*"
    ],
    "iotwireless:createwirelessgatewaytask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:deletedestination": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*"
    ],
    "iotwireless:deletedeviceprofile": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:DeviceProfile/.*"
    ],
    "iotwireless:deletefuotatask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*"
    ],
    "iotwireless:deletemulticastgroup": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:deletenetworkanalyzerconfiguration": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:NetworkAnalyzerConfiguration/.*"
    ],
    "iotwireless:deleteserviceprofile": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:ServiceProfile/.*"
    ],
    "iotwireless:deletewirelessdevice": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:deletewirelessdeviceimporttask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/.*"
    ],
    "iotwireless:deletewirelessgateway": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:deletewirelessgatewaytask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:deletewirelessgatewaytaskdefinition": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGatewayTaskDefinition/.*"
    ],
    "iotwireless:deregisterwirelessdevice": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:disassociateawsaccountfrompartneraccount": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:SidewalkAccount/.*"
    ],
    "iotwireless:disassociatemulticastgroupfromfuotatask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:disassociatewirelessdevicefromfuotatask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:disassociatewirelessdevicefrommulticastgroup": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:disassociatewirelessdevicefromthing": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iotwireless:disassociatewirelessgatewayfromcertificate": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*",
      "arn:${Partition}:iot:${Region}:${Account}:cert/.*"
    ],
    "iotwireless:disassociatewirelessgatewayfromthing": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*",
      "arn:${Partition}:iot:${Region}:${Account}:thing/.*"
    ],
    "iotwireless:getdestination": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*"
    ],
    "iotwireless:getdeviceprofile": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:DeviceProfile/.*"
    ],
    "iotwireless:getfuotatask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*"
    ],
    "iotwireless:getmulticastgroup": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:getmulticastgroupsession": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:getnetworkanalyzerconfiguration": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:NetworkAnalyzerConfiguration/.*"
    ],
    "iotwireless:getpartneraccount": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:SidewalkAccount/.*"
    ],
    "iotwireless:getposition": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getpositionconfiguration": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getresourceeventconfiguration": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:SidewalkAccount/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getresourceloglevel": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getresourceposition": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getserviceprofile": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:ServiceProfile/.*"
    ],
    "iotwireless:getwirelessdevice": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:getwirelessdeviceimporttask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/.*"
    ],
    "iotwireless:getwirelessdevicestatistics": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:getwirelessgateway": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getwirelessgatewaycertificate": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getwirelessgatewayfirmwareinformation": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getwirelessgatewaystatistics": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getwirelessgatewaytask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:getwirelessgatewaytaskdefinition": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGatewayTaskDefinition/.*"
    ],
    "iotwireless:listdevicesforwirelessdeviceimporttask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/.*"
    ],
    "iotwireless:listmulticastgroupsbyfuotatask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*"
    ],
    "iotwireless:listtagsforresource": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:DeviceProfile/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:NetworkAnalyzerConfiguration/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:ServiceProfile/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:SidewalkAccount/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGatewayTaskDefinition/.*"
    ],
    "iotwireless:putpositionconfiguration": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:putresourceloglevel": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:resetresourceloglevel": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:senddatatomulticastgroup": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:senddatatowirelessdevice": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:startbulkassociatewirelessdevicewithmulticastgroup": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:startbulkdisassociatewirelessdevicefrommulticastgroup": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:startfuotatask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*"
    ],
    "iotwireless:startmulticastgroupsession": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:startnetworkanalyzerstream": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:NetworkAnalyzerConfiguration/.*"
    ],
    "iotwireless:startsinglewirelessdeviceimporttask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*"
    ],
    "iotwireless:startwirelessdeviceimporttask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/.*"
    ],
    "iotwireless:tagresource": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:DeviceProfile/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:NetworkAnalyzerConfiguration/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:ServiceProfile/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:SidewalkAccount/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGatewayTaskDefinition/.*"
    ],
    "iotwireless:testwirelessdevice": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:untagresource": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:DeviceProfile/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:NetworkAnalyzerConfiguration/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:ServiceProfile/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:SidewalkAccount/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGatewayTaskDefinition/.*"
    ],
    "iotwireless:updatedestination": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*"
    ],
    "iotwireless:updatefuotatask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:FuotaTask/.*"
    ],
    "iotwireless:updatemulticastgroup": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*"
    ],
    "iotwireless:updatenetworkanalyzerconfiguration": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:MulticastGroup/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:NetworkAnalyzerConfiguration/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:updatepartneraccount": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:SidewalkAccount/.*"
    ],
    "iotwireless:updateposition": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:updateresourceeventconfiguration": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:SidewalkAccount/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:updateresourceposition": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iotwireless:updatewirelessdevice": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:Destination/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:DeviceProfile/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:ServiceProfile/.*",
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessDevice/.*"
    ],
    "iotwireless:updatewirelessdeviceimporttask": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:ImportTask/.*"
    ],
    "iotwireless:updatewirelessgateway": [
      "arn:${Partition}:iotwireless:${Region}:${Account}:WirelessGateway/.*"
    ],
    "iq-permission:approveaccessgrant": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq-permission:approvepermissionrequest": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq-permission:assumepermissionrole": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq-permission:createpermissionrequest": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq-permission:getpermissionrequest": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq-permission:listpermissionrequests": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq-permission:rejectpermissionrequest": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq-permission:revokepermissionrequest": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq-permission:withdrawpermissionrequest": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq:acceptcall": [
      "arn:${Partition}:iq:${Region}::call/.*"
    ],
    "iq:approvepaymentrequest": [
      "arn:${Partition}:iq:${Region}::paymentRequest/.*"
    ],
    "iq:approveproposal": [
      "arn:${Partition}:iq:${Region}::proposal/.*"
    ],
    "iq:archiveconversation": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:completeproposal": [
      "arn:${Partition}:iq:${Region}::proposal/.*"
    ],
    "iq:declinecall": [
      "arn:${Partition}:iq:${Region}::call/.*"
    ],
    "iq:deleteattachment": [
      "arn:${Partition}:iq:${Region}::attachment/.*"
    ],
    "iq:disableindividualpublicprofile": [
      "arn:${Partition}:iq:${Region}::expert/.*"
    ],
    "iq:downloadattachment": [
      "arn:${Partition}:iq:${Region}::attachment/.*"
    ],
    "iq:enableindividualpublicprofile": [
      "arn:${Partition}:iq:${Region}::expert/.*"
    ],
    "iq:endcall": [
      "arn:${Partition}:iq:${Region}::call/.*"
    ],
    "iq:getbuyer": [
      "arn:${Partition}:iq:${Region}::buyer/.*"
    ],
    "iq:getcall": [
      "arn:${Partition}:iq:${Region}::call/.*"
    ],
    "iq:getchatinfo": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:getchatmessages": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:getchattoken": [
      "arn:${Partition}:iq:${Region}::token/.*"
    ],
    "iq:getcompanychatmessages": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:getcompanyprofile": [
      "arn:${Partition}:iq:${Region}::company/.*"
    ],
    "iq:getconversation": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:getexpert": [
      "arn:${Partition}:iq:${Region}::expert/.*"
    ],
    "iq:getlisting": [
      "arn:${Partition}:iq:${Region}::listing/.*"
    ],
    "iq:getmarketplaceseller": [
      "arn:${Partition}:iq:${Region}::seller/.*"
    ],
    "iq:getpaymentrequest": [
      "arn:${Partition}:iq:${Region}::paymentRequest/.*"
    ],
    "iq:getproposal": [
      "arn:${Partition}:iq:${Region}::proposal/.*"
    ],
    "iq:getrequest": [
      "arn:${Partition}:iq:${Region}::request/.*"
    ],
    "iq:getreview": [
      "arn:${Partition}:iq:${Region}::seller/.*"
    ],
    "iq:hiderequest": [
      "arn:${Partition}:iq:${Region}::request/.*"
    ],
    "iq:linkawscertification": [
      "arn:${Partition}:iq:${Region}::expert/.*"
    ],
    "iq:listattachments": [
      "arn:${Partition}:iq:${Region}::attachment/.*"
    ],
    "iq:listconversations": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:listexpertaccesslogs": [
      "arn:${Partition}:iq-permission:${Region}::permission/.*"
    ],
    "iq:listlistings": [
      "arn:${Partition}:iq:${Region}::listing/.*"
    ],
    "iq:listpaymentrequests": [
      "arn:${Partition}:iq:${Region}::paymentRequest/.*",
      "arn:${Partition}:iq:${Region}::paymentSchedule/.*"
    ],
    "iq:listproposals": [
      "arn:${Partition}:iq:${Region}::proposal/.*"
    ],
    "iq:listrequests": [
      "arn:${Partition}:iq:${Region}::request/.*"
    ],
    "iq:listreviews": [
      "arn:${Partition}:iq:${Region}::seller/.*"
    ],
    "iq:markchatmessageread": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:rejectpaymentrequest": [
      "arn:${Partition}:iq:${Region}::paymentRequest/.*"
    ],
    "iq:rejectproposal": [
      "arn:${Partition}:iq:${Region}::proposal/.*"
    ],
    "iq:sendcompanychatmessage": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:sendindividualchatmessage": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:unarchiveconversation": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:unlinkawscertification": [
      "arn:${Partition}:iq:${Region}::expert/.*"
    ],
    "iq:updatecompanyprofile": [
      "arn:${Partition}:iq:${Region}::company/.*"
    ],
    "iq:updateconversationmembers": [
      "arn:${Partition}:iq:${Region}::conversation/.*"
    ],
    "iq:updateexpert": [
      "arn:${Partition}:iq:${Region}::expert/.*"
    ],
    "iq:updatelisting": [
      "arn:${Partition}:iq:${Region}::listing/.*"
    ],
    "iq:updaterequest": [
      "arn:${Partition}:iq:${Region}::request/.*"
    ],
    "iq:withdrawpaymentrequest": [
      "arn:${Partition}:iq:${Region}::paymentRequest/.*"
    ],
    "iq:withdrawproposal": [
      "arn:${Partition}:iq:${Region}::proposal/.*"
    ],
    "iq:writereview": [
      "arn:${Partition}:iq:${Region}::seller/.*"
    ],
    "ivs:batchgetchannel": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:batchgetstreamkey": [
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:batchstartviewersessionrevocation": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:createadconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:ad-configuration/.*"
    ],
    "ivs:createchannel": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:createencoderconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:encoder-configuration/.*"
    ],
    "ivs:createingestconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/.*"
    ],
    "ivs:createparticipanttoken": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:createplaybackrestrictionpolicy": [
      "arn:${Partition}:ivs:${Region}:${Account}:playback-restriction-policy/.*"
    ],
    "ivs:createrecordingconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:recording-configuration/.*"
    ],
    "ivs:createstage": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:createstorageconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:storage-configuration/.*"
    ],
    "ivs:createstreamkey": [
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:deleteadconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:ad-configuration/.*"
    ],
    "ivs:deletechannel": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:deleteencoderconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:encoder-configuration/.*"
    ],
    "ivs:deleteingestconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/.*"
    ],
    "ivs:deleteplaybackkeypair": [
      "arn:${Partition}:ivs:${Region}:${Account}:playback-key/.*"
    ],
    "ivs:deleteplaybackrestrictionpolicy": [
      "arn:${Partition}:ivs:${Region}:${Account}:playback-restriction-policy/.*"
    ],
    "ivs:deletepublickey": [
      "arn:${Partition}:ivs:${Region}:${Account}:public-key/.*"
    ],
    "ivs:deleterecordingconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:recording-configuration/.*"
    ],
    "ivs:deletestage": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:deletestorageconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:storage-configuration/.*"
    ],
    "ivs:deletestreamkey": [
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:disconnectparticipant": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:getadconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:ad-configuration/.*"
    ],
    "ivs:getchannel": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:getcomposition": [
      "arn:${Partition}:ivs:${Region}:${Account}:composition/.*"
    ],
    "ivs:getencoderconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:encoder-configuration/.*"
    ],
    "ivs:getingestconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/.*"
    ],
    "ivs:getparticipant": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:getplaybackkeypair": [
      "arn:${Partition}:ivs:${Region}:${Account}:playback-key/.*"
    ],
    "ivs:getplaybackrestrictionpolicy": [
      "arn:${Partition}:ivs:${Region}:${Account}:playback-restriction-policy/.*"
    ],
    "ivs:getpublickey": [
      "arn:${Partition}:ivs:${Region}:${Account}:public-key/.*"
    ],
    "ivs:getrecordingconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:recording-configuration/.*"
    ],
    "ivs:getstage": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:getstagesession": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:getstorageconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:storage-configuration/.*"
    ],
    "ivs:getstream": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:getstreamkey": [
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:getstreamsession": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:importplaybackkeypair": [
      "arn:${Partition}:ivs:${Region}:${Account}:playback-key/.*"
    ],
    "ivs:importpublickey": [
      "arn:${Partition}:ivs:${Region}:${Account}:public-key/.*"
    ],
    "ivs:insertadbreak": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:listchannels": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:listcompositions": [
      "arn:${Partition}:ivs:${Region}:${Account}:encoder-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:listparticipantevents": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:listparticipantreplicas": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:listparticipants": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:listplaybackkeypairs": [
      "arn:${Partition}:ivs:${Region}:${Account}:playback-key/.*"
    ],
    "ivs:listrecordingconfigurations": [
      "arn:${Partition}:ivs:${Region}:${Account}:recording-configuration/.*"
    ],
    "ivs:liststages": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:liststagesessions": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:liststreamkeys": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:liststreams": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:liststreamsessions": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:listtagsforresource": [
      "arn:${Partition}:ivs:${Region}:${Account}:ad-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:composition/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:encoder-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:playback-key/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:playback-restriction-policy/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:public-key/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:recording-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:storage-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:putmetadata": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:startcomposition": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:encoder-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:storage-configuration/.*"
    ],
    "ivs:startparticipantreplication": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:startviewersessionrevocation": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:stopcomposition": [
      "arn:${Partition}:ivs:${Region}:${Account}:composition/.*"
    ],
    "ivs:stopparticipantreplication": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivs:stopstream": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:tagresource": [
      "arn:${Partition}:ivs:${Region}:${Account}:ad-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:composition/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:encoder-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:playback-key/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:playback-restriction-policy/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:public-key/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:recording-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:storage-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:untagresource": [
      "arn:${Partition}:ivs:${Region}:${Account}:ad-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:composition/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:encoder-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:playback-key/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:playback-restriction-policy/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:public-key/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:recording-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:storage-configuration/.*",
      "arn:${Partition}:ivs:${Region}:${Account}:stream-key/.*"
    ],
    "ivs:updatechannel": [
      "arn:${Partition}:ivs:${Region}:${Account}:channel/.*"
    ],
    "ivs:updateingestconfiguration": [
      "arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/.*"
    ],
    "ivs:updateplaybackrestrictionpolicy": [
      "arn:${Partition}:ivs:${Region}:${Account}:playback-restriction-policy/.*"
    ],
    "ivs:updatestage": [
      "arn:${Partition}:ivs:${Region}:${Account}:stage/.*"
    ],
    "ivschat:createchattoken": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:createloggingconfiguration": [
      "arn:${Partition}:ivschat:${Region}:${Account}:logging-configuration/.*"
    ],
    "ivschat:createroom": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:deleteloggingconfiguration": [
      "arn:${Partition}:ivschat:${Region}:${Account}:logging-configuration/.*"
    ],
    "ivschat:deletemessage": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:deleteroom": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:disconnectuser": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:getloggingconfiguration": [
      "arn:${Partition}:ivschat:${Region}:${Account}:logging-configuration/.*"
    ],
    "ivschat:getroom": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:listloggingconfigurations": [
      "arn:${Partition}:ivschat:${Region}:${Account}:logging-configuration/.*"
    ],
    "ivschat:listrooms": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:listtagsforresource": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:sendevent": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:tagresource": [
      "arn:${Partition}:ivschat:${Region}:${Account}:logging-configuration/.*",
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:untagresource": [
      "arn:${Partition}:ivschat:${Region}:${Account}:logging-configuration/.*",
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "ivschat:updateloggingconfiguration": [
      "arn:${Partition}:ivschat:${Region}:${Account}:logging-configuration/.*"
    ],
    "ivschat:updateroom": [
      "arn:${Partition}:ivschat:${Region}:${Account}:room/.*"
    ],
    "kafka-cluster:altercluster": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka-cluster:alterclusterdynamicconfiguration": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka-cluster:altergroup": [
      "arn:${Partition}:kafka:${Region}:${Account}:group/.*"
    ],
    "kafka-cluster:altertopic": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka-cluster:altertopicdynamicconfiguration": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka-cluster:altertransactionalid": [
      "arn:${Partition}:kafka:${Region}:${Account}:transactional-id/.*"
    ],
    "kafka-cluster:connect": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka-cluster:createtopic": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka-cluster:deletegroup": [
      "arn:${Partition}:kafka:${Region}:${Account}:group/.*"
    ],
    "kafka-cluster:deletetopic": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka-cluster:describecluster": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka-cluster:describeclusterdynamicconfiguration": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka-cluster:describegroup": [
      "arn:${Partition}:kafka:${Region}:${Account}:group/.*"
    ],
    "kafka-cluster:describetopic": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka-cluster:describetopicdynamicconfiguration": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka-cluster:describetransactionalid": [
      "arn:${Partition}:kafka:${Region}:${Account}:transactional-id/.*"
    ],
    "kafka-cluster:readdata": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka-cluster:writedata": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka-cluster:writedataidempotently": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:batchassociatescramsecret": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:batchdisassociatescramsecret": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:createchannel": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:createcluster": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:createclusterv2": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:createconfiguration": [
      "arn:${Partition}:kafka:${Region}:${Account}:configuration/.*"
    ],
    "kafka:createreplicator": [
      "arn:${Partition}:kafka:${Region}:${Account}:replicator/.*"
    ],
    "kafka:createtopic": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka:createvpcconnection": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:kafka:${Region}:${VpcOwnerAccount}:vpc-connection/.*"
    ],
    "kafka:deletechannel": [
      "arn:${Partition}:kafka:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:deletecluster": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:deleteclusterpolicy": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:deleteconfiguration": [
      "arn:${Partition}:kafka:${Region}:${Account}:configuration/.*"
    ],
    "kafka:deletereplicator": [
      "arn:${Partition}:kafka:${Region}:${Account}:replicator/.*"
    ],
    "kafka:deletetopic": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka:deletevpcconnection": [
      "arn:${Partition}:kafka:${Region}:${VpcOwnerAccount}:vpc-connection/.*"
    ],
    "kafka:describechannel": [
      "arn:${Partition}:kafka:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:describecluster": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:describeclusterv2": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:describeconfiguration": [
      "arn:${Partition}:kafka:${Region}:${Account}:configuration/.*"
    ],
    "kafka:describeconfigurationrevision": [
      "arn:${Partition}:kafka:${Region}:${Account}:configuration/.*"
    ],
    "kafka:describereplicator": [
      "arn:${Partition}:kafka:${Region}:${Account}:replicator/.*"
    ],
    "kafka:describetopic": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka:describetopicpartitions": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafka:describevpcconnection": [
      "arn:${Partition}:kafka:${Region}:${VpcOwnerAccount}:vpc-connection/.*"
    ],
    "kafka:getclusterpolicy": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:listchannels": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:listclientvpcconnections": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:listclusteroperations": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:listclusteroperationsv2": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:listconfigurationrevisions": [
      "arn:${Partition}:kafka:${Region}:${Account}:configuration/.*"
    ],
    "kafka:listnodes": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:listscramsecrets": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:listtagsforresource": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:listtopics": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:putclusterpolicy": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:rebootbroker": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:rejectclientvpcconnection": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:kafka:${Region}:${VpcOwnerAccount}:vpc-connection/.*"
    ],
    "kafka:tagresource": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:kafka:${Region}:${VpcOwnerAccount}:vpc-connection/.*"
    ],
    "kafka:untagresource": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:kafka:${Region}:${VpcOwnerAccount}:vpc-connection/.*"
    ],
    "kafka:updatebrokercount": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updatebrokerstorage": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updatebrokertype": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updatechannel": [
      "arn:${Partition}:kafka:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updateclusterconfiguration": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:kafka:${Region}:${Account}:configuration/.*"
    ],
    "kafka:updateclusterkafkaversion": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updateconfiguration": [
      "arn:${Partition}:kafka:${Region}:${Account}:configuration/.*"
    ],
    "kafka:updateconnectivity": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updatemonitoring": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updaterebalancing": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updatereplicationinfo": [
      "arn:${Partition}:kafka:${Region}:${Account}:replicator/.*"
    ],
    "kafka:updatesecurity": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updatestorage": [
      "arn:${Partition}:kafka:${Region}:${Account}:cluster/.*"
    ],
    "kafka:updatetopic": [
      "arn:${Partition}:kafka:${Region}:${Account}:topic/.*"
    ],
    "kafkaconnect:deleteconnector": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:connector/.*"
    ],
    "kafkaconnect:deletecustomplugin": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:custom-plugin/.*"
    ],
    "kafkaconnect:deleteworkerconfiguration": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:worker-configuration/.*"
    ],
    "kafkaconnect:describeconnector": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:connector/.*"
    ],
    "kafkaconnect:describeconnectoroperation": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:connector-operation/.*"
    ],
    "kafkaconnect:describecustomplugin": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:custom-plugin/.*"
    ],
    "kafkaconnect:describeworkerconfiguration": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:worker-configuration/.*"
    ],
    "kafkaconnect:listconnectoroperations": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:connector/.*"
    ],
    "kafkaconnect:listtagsforresource": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:connector/.*",
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:custom-plugin/.*",
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:worker-configuration/.*"
    ],
    "kafkaconnect:tagresource": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:connector/.*",
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:custom-plugin/.*",
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:worker-configuration/.*"
    ],
    "kafkaconnect:untagresource": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:connector/.*",
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:custom-plugin/.*",
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:worker-configuration/.*"
    ],
    "kafkaconnect:updateconnector": [
      "arn:${Partition}:kafkaconnect:${Region}:${Account}:connector/.*"
    ],
    "kendra-ranking:deleterescoreexecutionplan": [
      "arn:${Partition}:kendra-ranking:${Region}:${Account}:rescore-execution-plan/.*"
    ],
    "kendra-ranking:describerescoreexecutionplan": [
      "arn:${Partition}:kendra-ranking:${Region}:${Account}:rescore-execution-plan/.*"
    ],
    "kendra-ranking:listtagsforresource": [
      "arn:${Partition}:kendra-ranking:${Region}:${Account}:rescore-execution-plan/.*"
    ],
    "kendra-ranking:rescore": [
      "arn:${Partition}:kendra-ranking:${Region}:${Account}:rescore-execution-plan/.*"
    ],
    "kendra-ranking:tagresource": [
      "arn:${Partition}:kendra-ranking:${Region}:${Account}:rescore-execution-plan/.*"
    ],
    "kendra-ranking:untagresource": [
      "arn:${Partition}:kendra-ranking:${Region}:${Account}:rescore-execution-plan/.*"
    ],
    "kendra-ranking:updaterescoreexecutionplan": [
      "arn:${Partition}:kendra-ranking:${Region}:${Account}:rescore-execution-plan/.*"
    ],
    "kendra:associateentitiestoexperience": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:associatepersonastoentities": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:batchdeletedocument": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:batchdeletefeaturedresultsset": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:batchgetdocumentstatus": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:batchputdocument": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:clearquerysuggestions": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:createaccesscontrolconfiguration": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:createdatasource": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:createexperience": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:createfaq": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:createfeaturedresultsset": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:createquerysuggestionsblocklist": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:createthesaurus": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:deleteaccesscontrolconfiguration": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:deletedatasource": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:deleteexperience": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:deletefaq": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:deleteindex": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:deleteprincipalmapping": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:deletequerysuggestionsblocklist": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:deletethesaurus": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describeaccesscontrolconfiguration": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describedatasource": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describeexperience": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describefaq": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describefeaturedresultsset": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describeindex": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describeprincipalmapping": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describequerysuggestionsblocklist": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describequerysuggestionsconfig": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:describethesaurus": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:disassociateentitiesfromexperience": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:disassociatepersonasfromentities": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:getquerysuggestions": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:getsnapshots": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listaccesscontrolconfigurations": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listdatasources": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listdatasourcesyncjobs": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listentitypersonas": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listexperienceentities": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listexperiences": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listfaqs": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listfeaturedresultssets": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listgroupsolderthanorderingid": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listquerysuggestionsblocklists": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listtagsforresource": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:listthesauri": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:putprincipalmapping": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:query": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:retrieve": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:startdatasourcesyncjob": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:stopdatasourcesyncjob": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:submitfeedback": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:tagresource": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:untagresource": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:updateaccesscontrolconfiguration": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:updatedatasource": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:updateexperience": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:updatefeaturedresultsset": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:updateindex": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:updatequerysuggestionsblocklist": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:updatequerysuggestionsconfig": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kendra:updatethesaurus": [
      "arn:${Partition}:kendra:${Region}:${Account}:index/.*"
    ],
    "kinesis:addtagstostream": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:associatestreamswithchannel": [
      "arn:${Partition}:kinesis:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:createchannel": [
      "arn:${Partition}:kinesis:${Region}:${Account}:channel/.*"
    ],
    "kinesis:createstream": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:decreasestreamretentionperiod": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:deletechannel": [
      "arn:${Partition}:kinesis:${Region}:${Account}:channel/.*"
    ],
    "kinesis:deleteresourcepolicy": [
      "arn:${Partition}:kinesis:${Region}:${Account}:.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:deletestream": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:deregisterstreamconsumer": [
      "arn:${Partition}:kinesis:${Region}:${Account}:.*"
    ],
    "kinesis:describechannel": [
      "arn:${Partition}:kinesis:${Region}:${Account}:channel/.*"
    ],
    "kinesis:describestream": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:describestreamconsumer": [
      "arn:${Partition}:kinesis:${Region}:${Account}:.*"
    ],
    "kinesis:describestreamsummary": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:getrecords": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:getresourcepolicy": [
      "arn:${Partition}:kinesis:${Region}:${Account}:.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:getsharditerator": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:increasestreamretentionperiod": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:listshards": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:liststreamconsumers": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:listtagsforresource": [
      "arn:${Partition}:kinesis:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:listtagsforstream": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:mergeshards": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:putrecord": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:putrecords": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:putresourcepolicy": [
      "arn:${Partition}:kinesis:${Region}:${Account}:.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:registerstreamconsumer": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:removetagsfromstream": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:splitshard": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:startstreamencryption": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:stopstreamencryption": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:subscribetoshard": [
      "arn:${Partition}:kinesis:${Region}:${Account}:.*"
    ],
    "kinesis:tagresource": [
      "arn:${Partition}:kinesis:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:untagresource": [
      "arn:${Partition}:kinesis:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:.*",
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:updatechannel": [
      "arn:${Partition}:kinesis:${Region}:${Account}:channel/.*"
    ],
    "kinesis:updatemaxrecordsize": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesis:updatestreamwarmthroughput": [
      "arn:${Partition}:kinesis:${Region}:${Account}:stream/.*"
    ],
    "kinesisanalytics:addapplicationcloudwatchloggingoption": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:addapplicationinput": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:addapplicationinputprocessingconfiguration": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:addapplicationoutput": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:addapplicationreferencedatasource": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:addapplicationvpcconfiguration": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:createapplicationpresignedurl": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:createapplicationsnapshot": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:deleteapplication": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:deleteapplicationcloudwatchloggingoption": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:deleteapplicationinputprocessingconfiguration": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:deleteapplicationoutput": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:deleteapplicationreferencedatasource": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:deleteapplicationsnapshot": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:deleteapplicationvpcconfiguration": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:describeapplication": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:describeapplicationoperation": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:describeapplicationsnapshot": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:describeapplicationversion": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:getapplicationstate": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:listapplicationoperations": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:listapplicationsnapshots": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:listapplicationversions": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:listtagsforresource": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:rollbackapplication": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:startapplication": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:stopapplication": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:tagresource": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:untagresource": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:updateapplication": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisanalytics:updateapplicationmaintenanceconfiguration": [
      "arn:${Partition}:kinesisanalytics:${Region}:${Account}:application/.*"
    ],
    "kinesisvideo:connectasmaster": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:connectasviewer": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:createsignalingchannel": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:createstream": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:deleteedgeconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:deletesignalingchannel": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:deletestream": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:describeedgeconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:describeimagegenerationconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:describemappedresourceconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:describemediastorageconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:describenotificationconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:describesignalingchannel": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:describestream": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:describestreamstorageconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:getclip": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:getdashstreamingsessionurl": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:getdataendpoint": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:gethlsstreamingsessionurl": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:geticeserverconfig": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:getimages": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:getmedia": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:getmediaforfragmentlist": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:getsignalingchannelendpoint": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:joinstoragesession": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:joinstoragesessionasviewer": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:listfragments": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:listtagsforresource": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:listtagsforstream": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:putmedia": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:sendalexaoffertomaster": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:startedgeconfigurationupdate": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:tagresource": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:tagstream": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:untagresource": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*",
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:untagstream": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:updatedataretention": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:updateimagegenerationconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:updatemediastorageconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:updatenotificationconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:updatesignalingchannel": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:channel/.*"
    ],
    "kinesisvideo:updatestream": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kinesisvideo:updatestreamstorageconfiguration": [
      "arn:${Partition}:kinesisvideo:${Region}:${Account}:stream/.*"
    ],
    "kms:cancelkeydeletion": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:createalias": [
      "arn:${Partition}:kms:${Region}:${Account}:alias/.*",
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:creategrant": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:decrypt": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:deletealias": [
      "arn:${Partition}:kms:${Region}:${Account}:alias/.*",
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:deleteimportedkeymaterial": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:derivesharedsecret": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:describekey": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:disablekey": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:disablekeyrotation": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:enablekey": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:enablekeyrotation": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:encrypt": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:generatedatakey": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:generatedatakeypair": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:generatedatakeypairwithoutplaintext": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:generatedatakeywithoutplaintext": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:generatemac": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:getkeylastusage": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:getkeypolicy": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:getkeyrotationstatus": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:getparametersforimport": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:getpublickey": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:importkeymaterial": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:listgrants": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:listkeypolicies": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:listkeyrotations": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:listresourcetags": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:putkeypolicy": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:reencryptfrom": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:reencryptto": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:replicatekey": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:retiregrant": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:revokegrant": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:rotatekeyondemand": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:schedulekeydeletion": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:sign": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:synchronizemultiregionkey": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:tagresource": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:untagresource": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:updatealias": [
      "arn:${Partition}:kms:${Region}:${Account}:alias/.*",
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:updatekeydescription": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:updateprimaryregion": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:verify": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "kms:verifymac": [
      "arn:${Partition}:kms:${Region}:${Account}:key/.*"
    ],
    "lambda:addlayerversionpermission": [
      "arn:${Partition}:lambda:${Region}:${Account}:layer:.*"
    ],
    "lambda:addpermission": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:checkpointdurableexecution": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:createalias": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:createcapacityprovider": [
      "arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:.*"
    ],
    "lambda:createfunction": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:createfunctionurlconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:createmicrovmauthtoken": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:createmicrovmshellauthtoken": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:createnetworkconnector": [
      "arn:${Partition}:lambda:${Region}:${Account}:network-connector:.*"
    ],
    "lambda:deletealias": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:deletecapacityprovider": [
      "arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:.*"
    ],
    "lambda:deletecodesigningconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:.*"
    ],
    "lambda:deleteeventsourcemapping": [
      "arn:${Partition}:lambda:${Region}:${Account}:event-source-mapping:.*"
    ],
    "lambda:deletefunction": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:deletefunctioncodesigningconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:deletefunctionconcurrency": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:deletefunctioneventinvokeconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:deletefunctionurlconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:deletelayerversion": [
      "arn:${Partition}:lambda:${Region}:${Account}:layer:.*"
    ],
    "lambda:deletemicrovmimage": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:deletemicrovmimageversion": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:deletenetworkconnector": [
      "arn:${Partition}:lambda:${Region}:${Account}:network-connector:.*"
    ],
    "lambda:deleteprovisionedconcurrencyconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:deleteresourcepolicy": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:disablereplication": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:enablereplication": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getalias": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getcapacityprovider": [
      "arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:.*"
    ],
    "lambda:getcodesigningconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:.*"
    ],
    "lambda:getdurableexecution": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getdurableexecutionhistory": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getdurableexecutionstate": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:geteventsourcemapping": [
      "arn:${Partition}:lambda:${Region}:${Account}:event-source-mapping:.*"
    ],
    "lambda:getfunction": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getfunctioncodesigningconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getfunctionconcurrency": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getfunctionconfiguration": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getfunctioneventinvokeconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getfunctionrecursionconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getfunctionscalingconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getfunctionurlconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getlayerversion": [
      "arn:${Partition}:lambda:${Region}:${Account}:layer:.*"
    ],
    "lambda:getlayerversionpolicy": [
      "arn:${Partition}:lambda:${Region}:${Account}:layer:.*"
    ],
    "lambda:getmicrovm": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:getmicrovmimage": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:getmicrovmimagebuild": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:getmicrovmimageversion": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:getnetworkconnector": [
      "arn:${Partition}:lambda:${Region}:${Account}:network-connector:.*"
    ],
    "lambda:getpolicy": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getprovisionedconcurrencyconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getresourcepolicy": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:getruntimemanagementconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:invokeasync": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:invokefunction": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:invokefunctionurl": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:listaliases": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:listdurableexecutionsbyfunction": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:listfunctioneventinvokeconfigs": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:listfunctionsbycodesigningconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:.*"
    ],
    "lambda:listfunctionurlconfigs": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:listfunctionversionsbycapacityprovider": [
      "arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:.*"
    ],
    "lambda:listmanagedmicrovmimageversions": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:listmicrovmimagebuilds": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:listmicrovmimageversions": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:listprovisionedconcurrencyconfigs": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:listtags": [
      "arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:event-source-mapping:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:network-connector:.*"
    ],
    "lambda:listversionsbyfunction": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:passcapacityprovider": [
      "arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:.*"
    ],
    "lambda:publishlayerversion": [
      "arn:${Partition}:lambda:${Region}:${Account}:layer:.*"
    ],
    "lambda:publishversion": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:putfunctioncodesigningconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:putfunctionconcurrency": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:putfunctioneventinvokeconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:putfunctionrecursionconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:putfunctionscalingconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:putprovisionedconcurrencyconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:putresourcepolicy": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:putruntimemanagementconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:removelayerversionpermission": [
      "arn:${Partition}:lambda:${Region}:${Account}:layer:.*"
    ],
    "lambda:removepermission": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:resumemicrovm": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:runmicrovm": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:senddurableexecutioncallbackfailure": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:senddurableexecutioncallbackheartbeat": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:senddurableexecutioncallbacksuccess": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:stopdurableexecution": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:suspendmicrovm": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:tagresource": [
      "arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:event-source-mapping:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:network-connector:.*"
    ],
    "lambda:terminatemicrovm": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:untagresource": [
      "arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:event-source-mapping:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:network-connector:.*"
    ],
    "lambda:updatealias": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:updatecapacityprovider": [
      "arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:.*"
    ],
    "lambda:updatecodesigningconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:.*"
    ],
    "lambda:updateeventsourcemapping": [
      "arn:${Partition}:lambda:${Region}:${Account}:event-source-mapping:.*"
    ],
    "lambda:updatefunctioncode": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:updatefunctioncodesigningconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:.*",
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:updatefunctionconfiguration": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:updatefunctioneventinvokeconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:updatefunctionurlconfig": [
      "arn:${Partition}:lambda:${Region}:${Account}:function:.*"
    ],
    "lambda:updatemicrovmimage": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:updatemicrovmimageversion": [
      "arn:${Partition}:lambda:${Region}:${Account}:microvm-image:.*"
    ],
    "lambda:updatenetworkconnector": [
      "arn:${Partition}:lambda:${Region}:${Account}:network-connector:.*"
    ],
    "launchwizard:createdeployment": [
      "arn:${Partition}:launchwizard:${Region}:${Account}:deployment/.*"
    ],
    "launchwizard:deletedeployment": [
      "arn:${Partition}:launchwizard:${Region}:${Account}:deployment/.*"
    ],
    "launchwizard:getdeployment": [
      "arn:${Partition}:launchwizard:${Region}:${Account}:deployment/.*"
    ],
    "launchwizard:listtagsforresource": [
      "arn:${Partition}:launchwizard:${Region}:${Account}:deployment/.*"
    ],
    "launchwizard:tagresource": [
      "arn:${Partition}:launchwizard:${Region}:${Account}:deployment/.*"
    ],
    "launchwizard:untagresource": [
      "arn:${Partition}:launchwizard:${Region}:${Account}:deployment/.*"
    ],
    "launchwizard:updatedeployment": [
      "arn:${Partition}:launchwizard:${Region}:${Account}:deployment/.*"
    ],
    "lex:batchcreatecustomvocabularyitem": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:batchdeletecustomvocabularyitem": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:batchupdatecustomvocabularyitem": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:buildbotlocale": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createbot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createbotalias": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createbotchannel": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createbotlocale": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createbotreplica": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createbotversion": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createcustomvocabulary": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createexport": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:createintent": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createintentversion": [
      "arn:${Partition}:lex:${Region}:${Account}:intent:.*"
    ],
    "lex:createresourcepolicy": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createresourcepolicystatement": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createslot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createslottype": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:createslottypeversion": [
      "arn:${Partition}:lex:${Region}:${Account}:slottype:.*"
    ],
    "lex:createtestsetdiscrepancyreport": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:deletebot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deletebotalias": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deletebotanalyzerrecommendation": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deletebotchannel": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deletebotchannelassociation": [
      "arn:${Partition}:lex:${Region}:${Account}:bot-channel:.*"
    ],
    "lex:deletebotlocale": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deletebotreplica": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deletebotversion": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deletecustomvocabulary": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deleteexport": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:deleteimport": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:deleteintent": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:intent:.*"
    ],
    "lex:deleteintentversion": [
      "arn:${Partition}:lex:${Region}:${Account}:intent:.*"
    ],
    "lex:deleteresourcepolicy": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deleteresourcepolicystatement": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deletesession": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deleteslot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:deleteslottype": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:slottype:.*"
    ],
    "lex:deleteslottypeversion": [
      "arn:${Partition}:lex:${Region}:${Account}:slottype:.*"
    ],
    "lex:deletetestset": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:deleteutterances": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describebot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describebotalias": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describebotanalyzerrecommendation": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describebotchannel": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describebotlocale": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describebotrecommendation": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describebotreplica": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describebotresourcegeneration": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describebotversion": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describecustomvocabulary": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describecustomvocabularymetadata": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describeexport": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:describeimport": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:describeintent": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describeresourcepolicy": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describeslot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describeslottype": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:describetestexecution": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:describetestset": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:describetestsetdiscrepancyreport": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:describetestsetgeneration": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:generatebotelement": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:getbot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:getbotalias": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:getbotchannelassociation": [
      "arn:${Partition}:lex:${Region}:${Account}:bot-channel:.*"
    ],
    "lex:getbotchannelassociations": [
      "arn:${Partition}:lex:${Region}:${Account}:bot-channel:.*"
    ],
    "lex:getbotversions": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:getexport": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:getintent": [
      "arn:${Partition}:lex:${Region}:${Account}:intent:.*"
    ],
    "lex:getintentversions": [
      "arn:${Partition}:lex:${Region}:${Account}:intent:.*"
    ],
    "lex:getsession": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:getslottype": [
      "arn:${Partition}:lex:${Region}:${Account}:slottype:.*"
    ],
    "lex:getslottypeversions": [
      "arn:${Partition}:lex:${Region}:${Account}:slottype:.*"
    ],
    "lex:gettestexecutionartifactsurl": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:getutterancesview": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listaggregatedutterances": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotaliases": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotaliasreplicas": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotanalyzerrecommendations": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotchannels": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotlocales": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotrecommendations": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotreplicas": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotresourcegenerations": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotversionreplicas": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listbotversions": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listcustomvocabularyitems": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listintentmetrics": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listintentpaths": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listintents": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listintentstagemetrics": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listrecommendedintents": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listsessionanalyticsdata": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listsessionmetrics": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listslots": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listslottypes": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:listtagsforresource": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:bot-channel:.*",
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:listtestexecutionresultitems": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:listtestsetrecords": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:postcontent": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:posttext": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:putbot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:putbotalias": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:putintent": [
      "arn:${Partition}:lex:${Region}:${Account}:intent:.*"
    ],
    "lex:putsession": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:putslottype": [
      "arn:${Partition}:lex:${Region}:${Account}:slottype:.*"
    ],
    "lex:recognizetext": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:recognizeutterance": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:searchassociatedtranscripts": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:startbotanalyzer": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:startbotrecommendation": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:startbotresourcegeneration": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:startconversation": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:startimport": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:startmigration": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:starttestexecution": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:starttestsetgeneration": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:stopbotanalyzer": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:stopbotrecommendation": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:tagresource": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:bot-channel:.*",
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:untagresource": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*",
      "arn:${Partition}:lex:${Region}:${Account}:bot-channel:.*",
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "lex:updatebot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updatebotalias": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updatebotlocale": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updatebotrecommendation": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updatecustomvocabulary": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updateexport": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updateintent": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updateresourcepolicy": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updateslot": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updateslottype": [
      "arn:${Partition}:lex:${Region}:${Account}:bot:.*"
    ],
    "lex:updatetestset": [
      "arn:${Partition}:lex:${Region}:${Account}:test-set/.*"
    ],
    "license-manager-linux-subscriptions:deregistersubscriptionprovider": [
      "arn:${Partition}:license-manager-linux-subscriptions:${Region}:${Account}:subscription-provider/.*"
    ],
    "license-manager-linux-subscriptions:getregisteredsubscriptionprovider": [
      "arn:${Partition}:license-manager-linux-subscriptions:${Region}:${Account}:subscription-provider/.*"
    ],
    "license-manager-linux-subscriptions:listtagsforresource": [
      "arn:${Partition}:license-manager-linux-subscriptions:${Region}:${Account}:subscription-provider/.*"
    ],
    "license-manager-linux-subscriptions:tagresource": [
      "arn:${Partition}:license-manager-linux-subscriptions:${Region}:${Account}:subscription-provider/.*"
    ],
    "license-manager-linux-subscriptions:untagresource": [
      "arn:${Partition}:license-manager-linux-subscriptions:${Region}:${Account}:subscription-provider/.*"
    ],
    "license-manager-user-subscriptions:associateuser": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*"
    ],
    "license-manager-user-subscriptions:createlicenseserverendpoint": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*"
    ],
    "license-manager-user-subscriptions:deletelicenseserverendpoint": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:license-server-endpoint/.*"
    ],
    "license-manager-user-subscriptions:deregisteridentityprovider": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*"
    ],
    "license-manager-user-subscriptions:disassociateuser": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:instance-user/.*"
    ],
    "license-manager-user-subscriptions:listproductsubscriptions": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*"
    ],
    "license-manager-user-subscriptions:listtagsforresource": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:instance-user/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:license-server-endpoint/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:product-subscription/.*"
    ],
    "license-manager-user-subscriptions:listuserassociations": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*"
    ],
    "license-manager-user-subscriptions:startproductsubscription": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*"
    ],
    "license-manager-user-subscriptions:stopproductsubscription": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:product-subscription/.*"
    ],
    "license-manager-user-subscriptions:tagresource": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:instance-user/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:license-server-endpoint/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:product-subscription/.*"
    ],
    "license-manager-user-subscriptions:untagresource": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:instance-user/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:license-server-endpoint/.*",
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:product-subscription/.*"
    ],
    "license-manager-user-subscriptions:updateidentityprovidersettings": [
      "arn:${Partition}:license-manager-user-subscriptions:${Region}:${Account}:identity-provider/.*"
    ],
    "license-manager:acceptgrant": [
      "arn:${Partition}:license-manager::${Account}:grant:.*"
    ],
    "license-manager:checkoutborrowlicense": [
      "arn:${Partition}:license-manager::${Account}:license:.*"
    ],
    "license-manager:creategrant": [
      "arn:${Partition}:license-manager::${Account}:license:.*"
    ],
    "license-manager:creategrantversion": [
      "arn:${Partition}:license-manager::${Account}:grant:.*"
    ],
    "license-manager:createlicenseassetgroup": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:.*"
    ],
    "license-manager:createlicenseversion": [
      "arn:${Partition}:license-manager::${Account}:license:.*"
    ],
    "license-manager:createtoken": [
      "arn:${Partition}:license-manager::${Account}:license:.*"
    ],
    "license-manager:deletegrant": [
      "arn:${Partition}:license-manager::${Account}:grant:.*"
    ],
    "license-manager:deletelicense": [
      "arn:${Partition}:license-manager::${Account}:license:.*"
    ],
    "license-manager:deletelicenseassetgroup": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:.*"
    ],
    "license-manager:deletelicenseassetruleset": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:.*"
    ],
    "license-manager:deletelicenseconfiguration": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*"
    ],
    "license-manager:deletelicensemanagerreportgenerator": [
      "arn:${Partition}:license-manager:${Region}:${Account}:report-generator:.*"
    ],
    "license-manager:getgrant": [
      "arn:${Partition}:license-manager::${Account}:grant:.*"
    ],
    "license-manager:getlicense": [
      "arn:${Partition}:license-manager::${Account}:license:.*"
    ],
    "license-manager:getlicenseassetgroup": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:.*"
    ],
    "license-manager:getlicenseassetruleset": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:.*"
    ],
    "license-manager:getlicenseconfiguration": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*"
    ],
    "license-manager:getlicensemanagerreportgenerator": [
      "arn:${Partition}:license-manager:${Region}:${Account}:report-generator:.*"
    ],
    "license-manager:getlicenseusage": [
      "arn:${Partition}:license-manager::${Account}:license:.*"
    ],
    "license-manager:listassetsforlicenseassetgroup": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:.*"
    ],
    "license-manager:listassociationsforlicenseconfiguration": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*"
    ],
    "license-manager:listfailuresforlicenseconfigurationoperations": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*"
    ],
    "license-manager:listlicenseassetgroups": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:.*"
    ],
    "license-manager:listlicenseassetrulesets": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:.*"
    ],
    "license-manager:listlicensemanagerreportgenerators": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*"
    ],
    "license-manager:listlicenseversions": [
      "arn:${Partition}:license-manager::${Account}:license:.*"
    ],
    "license-manager:listtagsforresource": [
      "arn:${Partition}:license-manager::${Account}:grant:.*",
      "arn:${Partition}:license-manager::${Account}:license:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:report-generator:.*"
    ],
    "license-manager:listusageforlicenseconfiguration": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*"
    ],
    "license-manager:rejectgrant": [
      "arn:${Partition}:license-manager::${Account}:grant:.*"
    ],
    "license-manager:tagresource": [
      "arn:${Partition}:license-manager::${Account}:grant:.*",
      "arn:${Partition}:license-manager::${Account}:license:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:report-generator:.*"
    ],
    "license-manager:untagresource": [
      "arn:${Partition}:license-manager::${Account}:grant:.*",
      "arn:${Partition}:license-manager::${Account}:license:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:report-generator:.*"
    ],
    "license-manager:updatelicenseassetgroup": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:.*",
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:.*"
    ],
    "license-manager:updatelicenseassetruleset": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:.*"
    ],
    "license-manager:updatelicenseconfiguration": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*"
    ],
    "license-manager:updatelicensemanagerreportgenerator": [
      "arn:${Partition}:license-manager:${Region}:${Account}:report-generator:.*"
    ],
    "license-manager:updatelicensespecificationsforresource": [
      "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:.*"
    ],
    "lightsail:attachcertificatetodistribution": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Certificate/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Distribution/.*"
    ],
    "lightsail:attachdisk": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Disk/.*"
    ],
    "lightsail:attachinstancestoloadbalancer": [
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*"
    ],
    "lightsail:attachloadbalancertlscertificate": [
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*"
    ],
    "lightsail:attachstaticip": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:StaticIp/.*"
    ],
    "lightsail:closeinstancepublicports": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:createbucketaccesskey": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Bucket/.*"
    ],
    "lightsail:createcontainerservicedeployment": [
      "arn:${Partition}:lightsail:${Region}:${Account}:ContainerService/.*"
    ],
    "lightsail:creatediskfromsnapshot": [
      "arn:${Partition}:lightsail:${Region}:${Account}:DiskSnapshot/.*"
    ],
    "lightsail:createdisksnapshot": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Disk/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:createdomainentry": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Domain/.*"
    ],
    "lightsail:createguisessionaccessdetails": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:createinstancesfromsnapshot": [
      "arn:${Partition}:lightsail:${Region}:${Account}:InstanceSnapshot/.*"
    ],
    "lightsail:createinstancesnapshot": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:createloadbalancertlscertificate": [
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*"
    ],
    "lightsail:createrelationaldatabasefromsnapshot": [
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabaseSnapshot/.*"
    ],
    "lightsail:deletealarm": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Alarm/.*"
    ],
    "lightsail:deletebucket": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Bucket/.*"
    ],
    "lightsail:deletebucketaccesskey": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Bucket/.*"
    ],
    "lightsail:deletecertificate": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Certificate/.*"
    ],
    "lightsail:deletecontainerimage": [
      "arn:${Partition}:lightsail:${Region}:${Account}:ContainerService/.*"
    ],
    "lightsail:deletecontainerservice": [
      "arn:${Partition}:lightsail:${Region}:${Account}:ContainerService/.*"
    ],
    "lightsail:deletedisk": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Disk/.*"
    ],
    "lightsail:deletedisksnapshot": [
      "arn:${Partition}:lightsail:${Region}:${Account}:DiskSnapshot/.*"
    ],
    "lightsail:deletedistribution": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Distribution/.*"
    ],
    "lightsail:deletedomain": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Domain/.*"
    ],
    "lightsail:deletedomainentry": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Domain/.*"
    ],
    "lightsail:deleteinstance": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:deleteinstancesnapshot": [
      "arn:${Partition}:lightsail:${Region}:${Account}:InstanceSnapshot/.*"
    ],
    "lightsail:deletekeypair": [
      "arn:${Partition}:lightsail:${Region}:${Account}:KeyPair/.*"
    ],
    "lightsail:deleteknownhostkeys": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:deleteloadbalancer": [
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*"
    ],
    "lightsail:deleteloadbalancertlscertificate": [
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*"
    ],
    "lightsail:deleterelationaldatabase": [
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/.*"
    ],
    "lightsail:deleterelationaldatabasesnapshot": [
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabaseSnapshot/.*"
    ],
    "lightsail:detachcertificatefromdistribution": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Distribution/.*"
    ],
    "lightsail:detachdisk": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Disk/.*"
    ],
    "lightsail:detachinstancesfromloadbalancer": [
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*"
    ],
    "lightsail:detachstaticip": [
      "arn:${Partition}:lightsail:${Region}:${Account}:StaticIp/.*"
    ],
    "lightsail:exportsnapshot": [
      "arn:${Partition}:lightsail:${Region}:${Account}:DiskSnapshot/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:InstanceSnapshot/.*"
    ],
    "lightsail:getcostestimate": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Disk/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:getinstanceaccessdetails": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:getrelationaldatabasemasteruserpassword": [
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/.*"
    ],
    "lightsail:getsetuphistory": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:openinstancepublicports": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:putalarm": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Alarm/.*"
    ],
    "lightsail:putinstancepublicports": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:rebootinstance": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:rebootrelationaldatabase": [
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/.*"
    ],
    "lightsail:registercontainerimage": [
      "arn:${Partition}:lightsail:${Region}:${Account}:ContainerService/.*"
    ],
    "lightsail:releasestaticip": [
      "arn:${Partition}:lightsail:${Region}:${Account}:StaticIp/.*"
    ],
    "lightsail:resetdistributioncache": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Distribution/.*"
    ],
    "lightsail:setipaddresstype": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Distribution/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*"
    ],
    "lightsail:setresourceaccessforbucket": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Bucket/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:setupinstancehttps": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:startguisession": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:startinstance": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:startrelationaldatabase": [
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/.*"
    ],
    "lightsail:stopguisession": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:stopinstance": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:stoprelationaldatabase": [
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/.*"
    ],
    "lightsail:tagresource": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Alarm/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Bucket/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Certificate/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:ContactMethod/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:ContainerService/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Disk/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:DiskSnapshot/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Distribution/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Domain/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:InstanceSnapshot/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:KeyPair/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabaseSnapshot/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:StaticIp/.*"
    ],
    "lightsail:testalarm": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Alarm/.*"
    ],
    "lightsail:untagresource": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Alarm/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Bucket/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Certificate/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:ContactMethod/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:ContainerService/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Disk/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:DiskSnapshot/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Distribution/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Domain/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:InstanceSnapshot/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:KeyPair/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabaseSnapshot/.*",
      "arn:${Partition}:lightsail:${Region}:${Account}:StaticIp/.*"
    ],
    "lightsail:updatebucket": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Bucket/.*"
    ],
    "lightsail:updatebucketbundle": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Bucket/.*"
    ],
    "lightsail:updatecontainerservice": [
      "arn:${Partition}:lightsail:${Region}:${Account}:ContainerService/.*"
    ],
    "lightsail:updatedistribution": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Distribution/.*"
    ],
    "lightsail:updatedistributionbundle": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Distribution/.*"
    ],
    "lightsail:updatedomainentry": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Domain/.*"
    ],
    "lightsail:updateinstancemetadataoptions": [
      "arn:${Partition}:lightsail:${Region}:${Account}:Instance/.*"
    ],
    "lightsail:updateloadbalancerattribute": [
      "arn:${Partition}:lightsail:${Region}:${Account}:LoadBalancer/.*"
    ],
    "lightsail:updaterelationaldatabase": [
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/.*"
    ],
    "lightsail:updaterelationaldatabaseparameters": [
      "arn:${Partition}:lightsail:${Region}:${Account}:RelationalDatabase/.*"
    ],
    "logs:associatekmskey": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:createdelivery": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-source:.*"
    ],
    "logs:createexporttask": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:createloganomalydetector": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:createloggroup": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:createlogstream": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:createlookuptable": [
      "arn:${Partition}:logs:${Region}:${Account}:lookup-table:.*"
    ],
    "logs:createscheduledquery": [
      "arn:${Partition}:logs:${Region}:${Account}:scheduled-query:.*"
    ],
    "logs:deletedataprotectionpolicy": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:deletedelivery": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery:.*"
    ],
    "logs:deletedeliverydestination": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*"
    ],
    "logs:deletedeliverydestinationpolicy": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*"
    ],
    "logs:deletedeliverysource": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*"
    ],
    "logs:deletedestination": [
      "arn:${Partition}:logs:${Region}:${Account}:destination:.*"
    ],
    "logs:deleteloganomalydetector": [
      "arn:${Partition}:logs:${Region}:${Account}:anomaly-detector:.*"
    ],
    "logs:deleteloggroup": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:deletelogstream": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:deletelookuptable": [
      "arn:${Partition}:logs:${Region}:${Account}:lookup-table:.*"
    ],
    "logs:deletemetricfilter": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:deleteretentionpolicy": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:deletescheduledquery": [
      "arn:${Partition}:logs:${Region}:${Account}:scheduled-query:.*"
    ],
    "logs:deletesubscriptionfilter": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:deletesyslogconfiguration": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:deletetransformer": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:describelogstreams": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:describemetricfilters": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:describesubscriptionfilters": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:disassociatekmskey": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:filterlogevents": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:getdataprotectionpolicy": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:getdelivery": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery:.*"
    ],
    "logs:getdeliverydestination": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*"
    ],
    "logs:getdeliverydestinationpolicy": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*"
    ],
    "logs:getdeliverysource": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery-source:.*"
    ],
    "logs:getloganomalydetector": [
      "arn:${Partition}:logs:${Region}:${Account}:anomaly-detector:.*"
    ],
    "logs:getlogevents": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:getloggroupfields": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:getlogrecord": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:getlookuptable": [
      "arn:${Partition}:logs:${Region}:${Account}:lookup-table:.*"
    ],
    "logs:getqueryresults": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:getscheduledquery": [
      "arn:${Partition}:logs:${Region}:${Account}:scheduled-query:.*"
    ],
    "logs:getscheduledqueryhistory": [
      "arn:${Partition}:logs:${Region}:${Account}:scheduled-query:.*"
    ],
    "logs:gettransformer": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:integratewiths3table": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:listanomalies": [
      "arn:${Partition}:logs:${Region}:${Account}:anomaly-detector:.*"
    ],
    "logs:listloganomalydetectors": [
      "arn:${Partition}:logs:${Region}:${Account}:anomaly-detector:.*"
    ],
    "logs:listtagsforresource": [
      "arn:${Partition}:logs:${Region}:${Account}:anomaly-detector:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-source:.*",
      "arn:${Partition}:logs:${Region}:${Account}:destination:.*",
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*",
      "arn:${Partition}:logs:${Region}:${Account}:lookup-table:.*"
    ],
    "logs:listtagsloggroup": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:processwithpipeline": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:putbearertokenauthentication": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:putdataprotectionpolicy": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:putdeliverydestination": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*"
    ],
    "logs:putdeliverydestinationpolicy": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*"
    ],
    "logs:putdeliverysource": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery-source:.*"
    ],
    "logs:putdestination": [
      "arn:${Partition}:logs:${Region}:${Account}:destination:.*"
    ],
    "logs:putdestinationpolicy": [
      "arn:${Partition}:logs:${Region}:${Account}:destination:.*"
    ],
    "logs:putlogevents": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:putloggroupdeletionprotection": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:putmetricfilter": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:putretentionpolicy": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:putsubscriptionfilter": [
      "arn:${Partition}:logs:${Region}:${Account}:destination:.*",
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:putsyslogconfiguration": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:puttransformer": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:startlivetail": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:startquery": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:tagloggroup": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:tagresource": [
      "arn:${Partition}:logs:${Region}:${Account}:anomaly-detector:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-source:.*",
      "arn:${Partition}:logs:${Region}:${Account}:destination:.*",
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*",
      "arn:${Partition}:logs:${Region}:${Account}:lookup-table:.*",
      "arn:${Partition}:logs:${Region}:${Account}:scheduled-query:.*"
    ],
    "logs:unmask": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:untagloggroup": [
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*"
    ],
    "logs:untagresource": [
      "arn:${Partition}:logs:${Region}:${Account}:anomaly-detector:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-source:.*",
      "arn:${Partition}:logs:${Region}:${Account}:destination:.*",
      "arn:${Partition}:logs:${Region}:${Account}:log-group:.*",
      "arn:${Partition}:logs:${Region}:${Account}:lookup-table:.*",
      "arn:${Partition}:logs:${Region}:${Account}:scheduled-query:.*"
    ],
    "logs:updateanomaly": [
      "arn:${Partition}:logs:${Region}:${Account}:anomaly-detector:.*"
    ],
    "logs:updatedeliveryconfiguration": [
      "arn:${Partition}:logs:${Region}:${Account}:delivery:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:.*",
      "arn:${Partition}:logs:${Region}:${Account}:delivery-source:.*"
    ],
    "logs:updateloganomalydetector": [
      "arn:${Partition}:logs:${Region}:${Account}:anomaly-detector:.*"
    ],
    "logs:updatelookuptable": [
      "arn:${Partition}:logs:${Region}:${Account}:lookup-table:.*"
    ],
    "logs:updatescheduledquery": [
      "arn:${Partition}:logs:${Region}:${Account}:scheduled-query:.*"
    ],
    "lookoutequipment:createdataset": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*"
    ],
    "lookoutequipment:createinferencescheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:createlabel": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*"
    ],
    "lookoutequipment:createlabelgroup": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*"
    ],
    "lookoutequipment:createmodel": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:createretrainingscheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:deletedataset": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*"
    ],
    "lookoutequipment:deleteinferencescheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*"
    ],
    "lookoutequipment:deletelabel": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*"
    ],
    "lookoutequipment:deletelabelgroup": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*"
    ],
    "lookoutequipment:deletemodel": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:deleteresourcepolicy": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:deleteretrainingscheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:describedataset": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*"
    ],
    "lookoutequipment:describeinferencescheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*"
    ],
    "lookoutequipment:describelabel": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*"
    ],
    "lookoutequipment:describelabelgroup": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*"
    ],
    "lookoutequipment:describemodel": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:describemodelversion": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:describeresourcepolicy": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:describeretrainingscheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:importdataset": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*"
    ],
    "lookoutequipment:importmodelversion": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:listdataingestionjobs": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*"
    ],
    "lookoutequipment:listinferenceevents": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*"
    ],
    "lookoutequipment:listinferenceexecutions": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*"
    ],
    "lookoutequipment:listlabelgroups": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*"
    ],
    "lookoutequipment:listlabels": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*"
    ],
    "lookoutequipment:listmodelversions": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:listsensorstatistics": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*"
    ],
    "lookoutequipment:listtagsforresource": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:putresourcepolicy": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:startdataingestionjob": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*"
    ],
    "lookoutequipment:startinferencescheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*"
    ],
    "lookoutequipment:startretrainingscheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:stopinferencescheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*"
    ],
    "lookoutequipment:stopretrainingscheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:tagresource": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:untagresource": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*",
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:updateactivemodelversion": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:updateinferencescheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:inference-scheduler/.*"
    ],
    "lookoutequipment:updatelabelgroup": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:label-group/.*"
    ],
    "lookoutequipment:updatemodel": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutequipment:updateretrainingscheduler": [
      "arn:${Partition}:lookoutequipment:${Region}:${Account}:model/.*"
    ],
    "lookoutmetrics:activateanomalydetector": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:backtestanomalydetector": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:createalert": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:Alert:.*",
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:createanomalydetector": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:createmetricset": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*",
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:MetricSet/.*"
    ],
    "lookoutmetrics:deactivateanomalydetector": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:deletealert": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:Alert:.*"
    ],
    "lookoutmetrics:deleteanomalydetector": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:describealert": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:Alert:.*"
    ],
    "lookoutmetrics:describeanomalydetectionexecutions": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:describeanomalydetector": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:describemetricset": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:MetricSet/.*"
    ],
    "lookoutmetrics:detectmetricsetconfig": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:getanomalygroup": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:getdataqualitymetrics": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:getfeedback": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:listalerts": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:listanomalygrouprelatedmetrics": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:listanomalygroupsummaries": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:listanomalygrouptimeseries": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:listmetricsets": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:listtagsforresource": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:Alert:.*",
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*",
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:MetricSet/.*"
    ],
    "lookoutmetrics:putfeedback": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:tagresource": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:Alert:.*",
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*",
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:MetricSet/.*"
    ],
    "lookoutmetrics:untagresource": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:Alert:.*",
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*",
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:MetricSet/.*"
    ],
    "lookoutmetrics:updatealert": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:Alert:.*"
    ],
    "lookoutmetrics:updateanomalydetector": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:AnomalyDetector:.*"
    ],
    "lookoutmetrics:updatemetricset": [
      "arn:${Partition}:lookoutmetrics:${Region}:${Account}:MetricSet/.*"
    ],
    "lookoutvision:createmodel": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "lookoutvision:createproject": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:project/.*"
    ],
    "lookoutvision:deletemodel": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "lookoutvision:deleteproject": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:project/.*"
    ],
    "lookoutvision:describemodel": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "lookoutvision:describeproject": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:project/.*"
    ],
    "lookoutvision:detectanomalies": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "lookoutvision:listtagsforresource": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "lookoutvision:startmodel": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "lookoutvision:startmodelpackagingjob": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "lookoutvision:stopmodel": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "lookoutvision:tagresource": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "lookoutvision:untagresource": [
      "arn:${Partition}:lookoutvision:${Region}:${Account}:model/.*"
    ],
    "m2:cancelbatchjobexecution": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:createdatasetexporttask": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:createdatasetimporttask": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:createdeployment": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*",
      "arn:${Partition}:m2:${Region}:${Account}:env/.*"
    ],
    "m2:deleteapplication": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:deleteapplicationfromenvironment": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:deleteenvironment": [
      "arn:${Partition}:m2:${Region}:${Account}:env/.*"
    ],
    "m2:getapplication": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:getapplicationversion": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:getbatchjobexecution": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:getdatasetdetails": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:getdatasetexporttask": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:getdatasetimporttask": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:getdeployment": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:getenvironment": [
      "arn:${Partition}:m2:${Region}:${Account}:env/.*"
    ],
    "m2:listapplicationversions": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:listbatchjobdefinitions": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:listbatchjobexecutions": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:listbatchjobrestartpoints": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:listdatasetexporthistory": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:listdatasetimporthistory": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:listdatasets": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:listdeployments": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:startapplication": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:startbatchjob": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:stopapplication": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:tagresource": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*",
      "arn:${Partition}:m2:${Region}:${Account}:env/.*"
    ],
    "m2:untagresource": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*",
      "arn:${Partition}:m2:${Region}:${Account}:env/.*"
    ],
    "m2:updateapplication": [
      "arn:${Partition}:m2:${Region}:${Account}:app/.*"
    ],
    "m2:updateenvironment": [
      "arn:${Partition}:m2:${Region}:${Account}:env/.*"
    ],
    "machinelearning:addtags": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:batchprediction/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:evaluation/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:createbatchprediction": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:batchprediction/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:createdatasourcefromrds": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*"
    ],
    "machinelearning:createdatasourcefromredshift": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*"
    ],
    "machinelearning:createdatasourcefroms3": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*"
    ],
    "machinelearning:createevaluation": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:evaluation/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:createmlmodel": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:createrealtimeendpoint": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:deletebatchprediction": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:batchprediction/.*"
    ],
    "machinelearning:deletedatasource": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*"
    ],
    "machinelearning:deleteevaluation": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:evaluation/.*"
    ],
    "machinelearning:deletemlmodel": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:deleterealtimeendpoint": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:deletetags": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:batchprediction/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:evaluation/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:describetags": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:batchprediction/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:evaluation/.*",
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:getbatchprediction": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:batchprediction/.*"
    ],
    "machinelearning:getdatasource": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*"
    ],
    "machinelearning:getevaluation": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*"
    ],
    "machinelearning:getmlmodel": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:predict": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "machinelearning:updatebatchprediction": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:batchprediction/.*"
    ],
    "machinelearning:updatedatasource": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:datasource/.*"
    ],
    "machinelearning:updateevaluation": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:evaluation/.*"
    ],
    "machinelearning:updatemlmodel": [
      "arn:${Partition}:machinelearning:${Region}:${Account}:mlmodel/.*"
    ],
    "macie2:batchgetcustomdataidentifiers": [
      "arn:${Partition}:macie2:${Region}:${Account}:custom-data-identifier/.*"
    ],
    "macie2:createclassificationjob": [
      "arn:${Partition}:macie2:${Region}:${Account}:classification-job/.*"
    ],
    "macie2:createcustomdataidentifier": [
      "arn:${Partition}:macie2:${Region}:${Account}:custom-data-identifier/.*"
    ],
    "macie2:createfindingsfilter": [
      "arn:${Partition}:macie2:${Region}:${Account}:findings-filter/.*"
    ],
    "macie2:createmember": [
      "arn:${Partition}:macie2:${Region}:${Account}:member/.*"
    ],
    "macie2:deleteallowlist": [
      "arn:${Partition}:macie2:${Region}:${Account}:allow-list/.*"
    ],
    "macie2:deletecustomdataidentifier": [
      "arn:${Partition}:macie2:${Region}:${Account}:custom-data-identifier/.*"
    ],
    "macie2:deletefindingsfilter": [
      "arn:${Partition}:macie2:${Region}:${Account}:findings-filter/.*"
    ],
    "macie2:deletemember": [
      "arn:${Partition}:macie2:${Region}:${Account}:member/.*"
    ],
    "macie2:describeclassificationjob": [
      "arn:${Partition}:macie2:${Region}:${Account}:classification-job/.*"
    ],
    "macie2:disassociatemember": [
      "arn:${Partition}:macie2:${Region}:${Account}:member/.*"
    ],
    "macie2:getallowlist": [
      "arn:${Partition}:macie2:${Region}:${Account}:allow-list/.*"
    ],
    "macie2:getcustomdataidentifier": [
      "arn:${Partition}:macie2:${Region}:${Account}:custom-data-identifier/.*"
    ],
    "macie2:getfindingsfilter": [
      "arn:${Partition}:macie2:${Region}:${Account}:findings-filter/.*"
    ],
    "macie2:getmember": [
      "arn:${Partition}:macie2:${Region}:${Account}:member/.*"
    ],
    "macie2:listtagsforresource": [
      "arn:${Partition}:macie2:${Region}:${Account}:allow-list/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:classification-job/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:custom-data-identifier/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:findings-filter/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:member/.*"
    ],
    "macie2:tagresource": [
      "arn:${Partition}:macie2:${Region}:${Account}:allow-list/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:classification-job/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:custom-data-identifier/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:findings-filter/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:member/.*"
    ],
    "macie2:untagresource": [
      "arn:${Partition}:macie2:${Region}:${Account}:allow-list/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:classification-job/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:custom-data-identifier/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:findings-filter/.*",
      "arn:${Partition}:macie2:${Region}:${Account}:member/.*"
    ],
    "macie2:updateallowlist": [
      "arn:${Partition}:macie2:${Region}:${Account}:allow-list/.*"
    ],
    "macie2:updateclassificationjob": [
      "arn:${Partition}:macie2:${Region}:${Account}:classification-job/.*"
    ],
    "macie2:updatefindingsfilter": [
      "arn:${Partition}:macie2:${Region}:${Account}:findings-filter/.*"
    ],
    "managedblockchain:createmember": [
      "arn:${Partition}:managedblockchain:${Region}::networks/.*"
    ],
    "managedblockchain:createnode": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:members/.*",
      "arn:${Partition}:managedblockchain:${Region}::networks/.*"
    ],
    "managedblockchain:createproposal": [
      "arn:${Partition}:managedblockchain:${Region}::networks/.*"
    ],
    "managedblockchain:deleteaccessor": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:accessors/.*"
    ],
    "managedblockchain:deletemember": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:members/.*"
    ],
    "managedblockchain:deletenode": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:nodes/.*"
    ],
    "managedblockchain:getaccessor": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:accessors/.*"
    ],
    "managedblockchain:getmember": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:members/.*"
    ],
    "managedblockchain:getnetwork": [
      "arn:${Partition}:managedblockchain:${Region}::networks/.*"
    ],
    "managedblockchain:getnode": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:nodes/.*"
    ],
    "managedblockchain:getproposal": [
      "arn:${Partition}:managedblockchain:${Region}::proposals/.*"
    ],
    "managedblockchain:listmembers": [
      "arn:${Partition}:managedblockchain:${Region}::networks/.*"
    ],
    "managedblockchain:listnodes": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:members/.*",
      "arn:${Partition}:managedblockchain:${Region}::networks/.*"
    ],
    "managedblockchain:listproposals": [
      "arn:${Partition}:managedblockchain:${Region}::networks/.*"
    ],
    "managedblockchain:listproposalvotes": [
      "arn:${Partition}:managedblockchain:${Region}::proposals/.*"
    ],
    "managedblockchain:listtagsforresource": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:accessors/.*",
      "arn:${Partition}:managedblockchain:${Region}:${Account}:invitations/.*",
      "arn:${Partition}:managedblockchain:${Region}:${Account}:members/.*",
      "arn:${Partition}:managedblockchain:${Region}::networks/.*",
      "arn:${Partition}:managedblockchain:${Region}:${Account}:nodes/.*",
      "arn:${Partition}:managedblockchain:${Region}::proposals/.*"
    ],
    "managedblockchain:rejectinvitation": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:invitations/.*"
    ],
    "managedblockchain:tagresource": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:accessors/.*",
      "arn:${Partition}:managedblockchain:${Region}:${Account}:invitations/.*",
      "arn:${Partition}:managedblockchain:${Region}:${Account}:members/.*",
      "arn:${Partition}:managedblockchain:${Region}::networks/.*",
      "arn:${Partition}:managedblockchain:${Region}:${Account}:nodes/.*",
      "arn:${Partition}:managedblockchain:${Region}::proposals/.*"
    ],
    "managedblockchain:untagresource": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:accessors/.*",
      "arn:${Partition}:managedblockchain:${Region}:${Account}:invitations/.*",
      "arn:${Partition}:managedblockchain:${Region}:${Account}:members/.*",
      "arn:${Partition}:managedblockchain:${Region}::networks/.*",
      "arn:${Partition}:managedblockchain:${Region}:${Account}:nodes/.*",
      "arn:${Partition}:managedblockchain:${Region}::proposals/.*"
    ],
    "managedblockchain:updatemember": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:members/.*"
    ],
    "managedblockchain:updatenode": [
      "arn:${Partition}:managedblockchain:${Region}:${Account}:nodes/.*"
    ],
    "managedblockchain:voteonproposal": [
      "arn:${Partition}:managedblockchain:${Region}::proposals/.*"
    ],
    "mapcredits:listassociatedprograms": [
      "arn:${Partition}:mapcredits:::.*"
    ],
    "mapcredits:listquartercredits": [
      "arn:${Partition}:mapcredits:::.*"
    ],
    "mapcredits:listquarterspend": [
      "arn:${Partition}:mapcredits:::.*"
    ],
    "mediaconnect:addbridgeoutputs": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:addbridgesources": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:addflowmediastreams": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:addflowoutputs": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:output:.*"
    ],
    "mediaconnect:addflowsources": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:source:.*"
    ],
    "mediaconnect:addflowvpcinterfaces": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:createbridge": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:createflow": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:creategateway": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:gateway:.*"
    ],
    "mediaconnect:createrouterinput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*"
    ],
    "mediaconnect:createrouternetworkinterface": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerNetworkInterface:.*"
    ],
    "mediaconnect:createrouteroutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*"
    ],
    "mediaconnect:deletebridge": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:deleteflow": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:deletegateway": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:gateway:.*"
    ],
    "mediaconnect:deleterouterinput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*"
    ],
    "mediaconnect:deleterouternetworkinterface": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerNetworkInterface:.*"
    ],
    "mediaconnect:deleterouteroutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*"
    ],
    "mediaconnect:deregistergatewayinstance": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:gateway:.*"
    ],
    "mediaconnect:describebridge": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:describeflow": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:describeflowsourcemetadata": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:describeflowsourcethumbnail": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:describegateway": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:gateway:.*"
    ],
    "mediaconnect:describegatewayinstance": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:gateway:.*"
    ],
    "mediaconnect:describeoffering": [
      "arn:${Partition}:mediaconnect:${Region}:offering:.*"
    ],
    "mediaconnect:describereservation": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:reservation:.*"
    ],
    "mediaconnect:discovergatewaypollendpoint": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:gateway:.*"
    ],
    "mediaconnect:getrouterinput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*"
    ],
    "mediaconnect:getrouterinputsourcemetadata": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*"
    ],
    "mediaconnect:getrouterinputthumbnail": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*"
    ],
    "mediaconnect:getrouternetworkinterface": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerNetworkInterface:.*"
    ],
    "mediaconnect:getrouteroutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*"
    ],
    "mediaconnect:grantflowentitlements": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:entitlement:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:purchaseoffering": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:reservation:.*"
    ],
    "mediaconnect:removebridgeoutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:removebridgesource": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:removeflowmediastream": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:removeflowoutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:output:.*"
    ],
    "mediaconnect:removeflowsource": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:source:.*"
    ],
    "mediaconnect:removeflowvpcinterface": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:restartrouterinput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*"
    ],
    "mediaconnect:restartrouteroutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*"
    ],
    "mediaconnect:revokeflowentitlement": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:entitlement:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:startflow": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:startrouterinput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*"
    ],
    "mediaconnect:startrouteroutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*"
    ],
    "mediaconnect:stopflow": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:stoprouterinput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*"
    ],
    "mediaconnect:stoprouteroutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*"
    ],
    "mediaconnect:tagresource": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:entitlement:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:output:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerNetworkInterface:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:source:.*"
    ],
    "mediaconnect:takerouterinput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*"
    ],
    "mediaconnect:untagresource": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:entitlement:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:output:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerNetworkInterface:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:source:.*"
    ],
    "mediaconnect:updatebridge": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:updatebridgeoutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:updatebridgesource": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:updatebridgestate": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:bridge:.*"
    ],
    "mediaconnect:updateflow": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:updateflowentitlement": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:updateflowmediastream": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*"
    ],
    "mediaconnect:updateflowoutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:output:.*"
    ],
    "mediaconnect:updateflowsource": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:.*",
      "arn:${Partition}:mediaconnect:${Region}:${Account}:source:.*"
    ],
    "mediaconnect:updategatewayinstance": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:gateway:.*"
    ],
    "mediaconnect:updaterouterinput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerInput:.*"
    ],
    "mediaconnect:updaterouternetworkinterface": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerNetworkInterface:.*"
    ],
    "mediaconnect:updaterouteroutput": [
      "arn:${Partition}:mediaconnect:${Region}:${Account}:routerOutput:.*"
    ],
    "mediaconvert:canceljob": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobs/.*"
    ],
    "mediaconvert:createjob": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobTemplates/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:presets/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:createjobtemplate": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:presets/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:createresourceshare": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobs/.*"
    ],
    "mediaconvert:deletejobtemplate": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobTemplates/.*"
    ],
    "mediaconvert:deletepreset": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:presets/.*"
    ],
    "mediaconvert:deletequeue": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:getjob": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobs/.*"
    ],
    "mediaconvert:getjobtemplate": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobTemplates/.*"
    ],
    "mediaconvert:getpreset": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:presets/.*"
    ],
    "mediaconvert:getqueue": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:listjobs": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:listtagsforresource": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobs/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobTemplates/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:presets/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:searchjobs": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:tagresource": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobs/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobTemplates/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:presets/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:untagresource": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobs/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobTemplates/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:presets/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:updatejobtemplate": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:jobTemplates/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:presets/.*",
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "mediaconvert:updatepreset": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:presets/.*"
    ],
    "mediaconvert:updatequeue": [
      "arn:${Partition}:mediaconvert:${Region}:${Account}:queues/.*"
    ],
    "medialive:acceptinputdevicetransfer": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:batchupdateschedule": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:cancelinputdevicetransfer": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:claimdevice": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:createchannel": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:input:.*"
    ],
    "medialive:createchannelplacementgroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:channelPlacementGroup:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*"
    ],
    "medialive:createcloudwatchalarmtemplate": [
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:.*"
    ],
    "medialive:createcloudwatchalarmtemplategroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:.*"
    ],
    "medialive:createcluster": [
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*"
    ],
    "medialive:createeventbridgeruletemplate": [
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:.*"
    ],
    "medialive:createeventbridgeruletemplategroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:.*"
    ],
    "medialive:createinput": [
      "arn:${Partition}:medialive:${Region}:${Account}:input:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:.*"
    ],
    "medialive:createinputsecuritygroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:.*"
    ],
    "medialive:createmultiplex": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:createmultiplexprogram": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:createnetwork": [
      "arn:${Partition}:medialive:${Region}:${Account}:network:.*"
    ],
    "medialive:createnode": [
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:node:.*"
    ],
    "medialive:createnoderegistrationscript": [
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*"
    ],
    "medialive:createpartnerinput": [
      "arn:${Partition}:medialive:${Region}:${Account}:input:.*"
    ],
    "medialive:createsdisource": [
      "arn:${Partition}:medialive:${Region}:${Account}:sdiSource:.*"
    ],
    "medialive:createsignalmap": [
      "arn:${Partition}:medialive:${Region}:${Account}:signal-map:.*"
    ],
    "medialive:createtags": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:channelPlacementGroup:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:input:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:network:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:node:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:reservation:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:sdiSource:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:signal-map:.*"
    ],
    "medialive:deletechannel": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:deletechannelplacementgroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:channelPlacementGroup:.*"
    ],
    "medialive:deletecloudwatchalarmtemplate": [
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template:.*"
    ],
    "medialive:deletecloudwatchalarmtemplategroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:.*"
    ],
    "medialive:deletecluster": [
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*"
    ],
    "medialive:deleteeventbridgeruletemplate": [
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template:.*"
    ],
    "medialive:deleteeventbridgeruletemplategroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:.*"
    ],
    "medialive:deleteinput": [
      "arn:${Partition}:medialive:${Region}:${Account}:input:.*"
    ],
    "medialive:deleteinputsecuritygroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:.*"
    ],
    "medialive:deletemultiplex": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:deletemultiplexprogram": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:deletenetwork": [
      "arn:${Partition}:medialive:${Region}:${Account}:network:.*"
    ],
    "medialive:deletenode": [
      "arn:${Partition}:medialive:${Region}:${Account}:node:.*"
    ],
    "medialive:deletereservation": [
      "arn:${Partition}:medialive:${Region}:${Account}:reservation:.*"
    ],
    "medialive:deleteschedule": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:deletesdisource": [
      "arn:${Partition}:medialive:${Region}:${Account}:sdiSource:.*"
    ],
    "medialive:deletesignalmap": [
      "arn:${Partition}:medialive:${Region}:${Account}:signal-map:.*"
    ],
    "medialive:deletetags": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:channelPlacementGroup:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:input:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:network:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:node:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:reservation:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:sdiSource:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:signal-map:.*"
    ],
    "medialive:describechannel": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:describechannelplacementgroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:channelPlacementGroup:.*"
    ],
    "medialive:describecluster": [
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*"
    ],
    "medialive:describeinput": [
      "arn:${Partition}:medialive:${Region}:${Account}:input:.*"
    ],
    "medialive:describeinputdevice": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:describeinputdevicethumbnail": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:describeinputsecuritygroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:.*"
    ],
    "medialive:describemultiplex": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:describemultiplexprogram": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:describenetwork": [
      "arn:${Partition}:medialive:${Region}:${Account}:network:.*"
    ],
    "medialive:describenode": [
      "arn:${Partition}:medialive:${Region}:${Account}:node:.*"
    ],
    "medialive:describeoffering": [
      "arn:${Partition}:medialive:${Region}:${Account}:offering:.*"
    ],
    "medialive:describereservation": [
      "arn:${Partition}:medialive:${Region}:${Account}:reservation:.*"
    ],
    "medialive:describeschedule": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:describesdisource": [
      "arn:${Partition}:medialive:${Region}:${Account}:sdiSource:.*"
    ],
    "medialive:describethumbnails": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:getcloudwatchalarmtemplate": [
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template:.*"
    ],
    "medialive:getcloudwatchalarmtemplategroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:.*"
    ],
    "medialive:geteventbridgeruletemplate": [
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template:.*"
    ],
    "medialive:geteventbridgeruletemplategroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:.*"
    ],
    "medialive:getsignalmap": [
      "arn:${Partition}:medialive:${Region}:${Account}:signal-map:.*"
    ],
    "medialive:listtagsforresource": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:channelPlacementGroup:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:input:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:network:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:node:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:reservation:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:sdiSource:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:signal-map:.*"
    ],
    "medialive:purchaseoffering": [
      "arn:${Partition}:medialive:${Region}:${Account}:offering:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:reservation:.*"
    ],
    "medialive:rebootinputdevice": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:rejectinputdevicetransfer": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:restartchannelpipelines": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:startchannel": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:startdeletemonitordeployment": [
      "arn:${Partition}:medialive:${Region}:${Account}:signal-map:.*"
    ],
    "medialive:startinputdevice": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:startinputdevicemaintenancewindow": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:startmonitordeployment": [
      "arn:${Partition}:medialive:${Region}:${Account}:signal-map:.*"
    ],
    "medialive:startmultiplex": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:startupdatesignalmap": [
      "arn:${Partition}:medialive:${Region}:${Account}:signal-map:.*"
    ],
    "medialive:stopchannel": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:stopinputdevice": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:stopmultiplex": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:transferinputdevice": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:updatechannel": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:updatechannelclass": [
      "arn:${Partition}:medialive:${Region}:${Account}:channel:.*"
    ],
    "medialive:updatechannelplacementgroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:channelPlacementGroup:.*"
    ],
    "medialive:updatecloudwatchalarmtemplate": [
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:.*"
    ],
    "medialive:updatecloudwatchalarmtemplategroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:.*"
    ],
    "medialive:updatecluster": [
      "arn:${Partition}:medialive:${Region}:${Account}:cluster:.*"
    ],
    "medialive:updateeventbridgeruletemplate": [
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template:.*",
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:.*"
    ],
    "medialive:updateeventbridgeruletemplategroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:.*"
    ],
    "medialive:updateinput": [
      "arn:${Partition}:medialive:${Region}:${Account}:input:.*"
    ],
    "medialive:updateinputdevice": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputDevice:.*"
    ],
    "medialive:updateinputsecuritygroup": [
      "arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:.*"
    ],
    "medialive:updatemultiplex": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:updatemultiplexprogram": [
      "arn:${Partition}:medialive:${Region}:${Account}:multiplex:.*"
    ],
    "medialive:updatenetwork": [
      "arn:${Partition}:medialive:${Region}:${Account}:network:.*"
    ],
    "medialive:updatenode": [
      "arn:${Partition}:medialive:${Region}:${Account}:node:.*"
    ],
    "medialive:updatenodestate": [
      "arn:${Partition}:medialive:${Region}:${Account}:node:.*"
    ],
    "medialive:updatereservation": [
      "arn:${Partition}:medialive:${Region}:${Account}:reservation:.*"
    ],
    "medialive:updatesdisource": [
      "arn:${Partition}:medialive:${Region}:${Account}:sdiSource:.*"
    ],
    "mediapackage-vod:configurelogs": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-groups/.*"
    ],
    "mediapackage-vod:deleteasset": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:assets/.*"
    ],
    "mediapackage-vod:deletepackagingconfiguration": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-configurations/.*"
    ],
    "mediapackage-vod:deletepackaginggroup": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-groups/.*"
    ],
    "mediapackage-vod:describeasset": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:assets/.*"
    ],
    "mediapackage-vod:describepackagingconfiguration": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-configurations/.*"
    ],
    "mediapackage-vod:describepackaginggroup": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-groups/.*"
    ],
    "mediapackage-vod:listtagsforresource": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:assets/.*",
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-configurations/.*",
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-groups/.*"
    ],
    "mediapackage-vod:tagresource": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:assets/.*",
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-configurations/.*",
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-groups/.*"
    ],
    "mediapackage-vod:untagresource": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:assets/.*",
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-configurations/.*",
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-groups/.*"
    ],
    "mediapackage-vod:updatepackaginggroup": [
      "arn:${Partition}:mediapackage-vod:${Region}:${Account}:packaging-groups/.*"
    ],
    "mediapackage:configurelogs": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:channels/.*"
    ],
    "mediapackage:deletechannel": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:channels/.*"
    ],
    "mediapackage:deleteoriginendpoint": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:origin_endpoints/.*"
    ],
    "mediapackage:describechannel": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:channels/.*"
    ],
    "mediapackage:describeharvestjob": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:harvest_jobs/.*"
    ],
    "mediapackage:describeoriginendpoint": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:origin_endpoints/.*"
    ],
    "mediapackage:listtagsforresource": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:channels/.*",
      "arn:${Partition}:mediapackage:${Region}:${Account}:harvest_jobs/.*",
      "arn:${Partition}:mediapackage:${Region}:${Account}:origin_endpoints/.*"
    ],
    "mediapackage:rotatechannelcredentials": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:channels/.*"
    ],
    "mediapackage:rotateingestendpointcredentials": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:channels/.*"
    ],
    "mediapackage:tagresource": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:channels/.*",
      "arn:${Partition}:mediapackage:${Region}:${Account}:harvest_jobs/.*",
      "arn:${Partition}:mediapackage:${Region}:${Account}:origin_endpoints/.*"
    ],
    "mediapackage:untagresource": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:channels/.*",
      "arn:${Partition}:mediapackage:${Region}:${Account}:harvest_jobs/.*",
      "arn:${Partition}:mediapackage:${Region}:${Account}:origin_endpoints/.*"
    ],
    "mediapackage:updatechannel": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:channels/.*"
    ],
    "mediapackage:updateoriginendpoint": [
      "arn:${Partition}:mediapackage:${Region}:${Account}:origin_endpoints/.*"
    ],
    "mediapackagev2:cancelharvestjob": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:createchannel": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:createchannelgroup": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:createharvestjob": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:createoriginendpoint": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:deletechannel": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:deletechannelgroup": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:deletechannelpolicy": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:deleteoriginendpoint": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:deleteoriginendpointpolicy": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:getchannel": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:getchannelgroup": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:getchannelpolicy": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:getharvestjob": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:getheadobject": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:getobject": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:getoriginendpoint": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:getoriginendpointpolicy": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:harvestobject": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:listchannels": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:listharvestjobs": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:listoriginendpoints": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:listtagsforresource": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:putchannelpolicy": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:putobject": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:putoriginendpointpolicy": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:resetchannelstate": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:resetoriginendpointstate": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:tagresource": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:untagresource": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:updatechannel": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:updatechannelgroup": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediapackagev2:updateoriginendpoint": [
      "arn:${Partition}:mediapackagev2:${Region}:${Account}:channelGroup/.*"
    ],
    "mediastore:deletecontainer": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:deletecontainerpolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:deletecorspolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:deletelifecyclepolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:deletemetricpolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:deleteobject": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:describecontainer": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:describeobject": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:getcontainerpolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:getcorspolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:getlifecyclepolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:getmetricpolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:getobject": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:listitems": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:listtagsforresource": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:putcontainerpolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:putcorspolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:putlifecyclepolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:putmetricpolicy": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:putobject": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:startaccesslogging": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:stopaccesslogging": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:tagresource": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediastore:untagresource": [
      "arn:${Partition}:mediastore:${Region}:${Account}:container/.*"
    ],
    "mediatailor:configurelogsforchannel": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:configurelogsforplaybackconfiguration": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*"
    ],
    "mediatailor:createprefetchschedule": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*"
    ],
    "mediatailor:deletechannel": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:deletechannelpolicy": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:deletelivesource": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:liveSource/.*"
    ],
    "mediatailor:deleteplaybackconfiguration": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*"
    ],
    "mediatailor:deleteprefetchschedule": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:prefetchSchedule/.*"
    ],
    "mediatailor:deleteprogram": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:program/.*"
    ],
    "mediatailor:deletesourcelocation": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:sourceLocation/.*"
    ],
    "mediatailor:deletevodsource": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:vodSource/.*"
    ],
    "mediatailor:describechannel": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:describelivesource": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:liveSource/.*"
    ],
    "mediatailor:describeprogram": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:program/.*"
    ],
    "mediatailor:describesourcelocation": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:sourceLocation/.*"
    ],
    "mediatailor:describevodsource": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:vodSource/.*"
    ],
    "mediatailor:getchannelpolicy": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:getchannelschedule": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:getplaybackconfiguration": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*"
    ],
    "mediatailor:getprefetchschedule": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:prefetchSchedule/.*"
    ],
    "mediatailor:listprefetchschedules": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*"
    ],
    "mediatailor:listtagsforresource": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:liveSource/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:sourceLocation/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:vodSource/.*"
    ],
    "mediatailor:putchannelpolicy": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:startchannel": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:stopchannel": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:tagresource": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:liveSource/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:sourceLocation/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:vodSource/.*"
    ],
    "mediatailor:untagresource": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:liveSource/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:playbackConfiguration/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:sourceLocation/.*",
      "arn:${Partition}:mediatailor:${Region}:${Account}:vodSource/.*"
    ],
    "mediatailor:updatechannel": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:channel/.*"
    ],
    "mediatailor:updatelivesource": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:liveSource/.*"
    ],
    "mediatailor:updateprogram": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:program/.*"
    ],
    "mediatailor:updatesourcelocation": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:sourceLocation/.*"
    ],
    "mediatailor:updatevodsource": [
      "arn:${Partition}:mediatailor:${Region}:${Account}:vodSource/.*"
    ],
    "medical-imaging:copyimageset": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:deletedatastore": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:deleteimageset": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getdatastore": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getdicombulkdata": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getdicomimportjob": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getdicominstance": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getdicominstanceframes": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getdicominstancemetadata": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getdicomseriesmetadata": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getimageframe": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getimageset": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:getimagesetmetadata": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:listdicomimportjobs": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:listimagesetversions": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:listtagsforresource": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:searchdicominstances": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:searchdicomseries": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:searchdicomstudies": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:searchimagesets": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:startdicomimportjob": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:storedicom": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:storedicomstudy": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:tagresource": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:untagresource": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "medical-imaging:updateimagesetmetadata": [
      "arn:${Partition}:medical-imaging:${Region}:${Account}:datastore/.*"
    ],
    "memorydb:batchupdatecluster": [
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*"
    ],
    "memorydb:connect": [
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:user/.*"
    ],
    "memorydb:copysnapshot": [
      "arn:${Partition}:memorydb:${Region}:${Account}:snapshot/.*"
    ],
    "memorydb:createacl": [
      "arn:${Partition}:memorydb:${Region}:${Account}:user/.*"
    ],
    "memorydb:createcluster": [
      "arn:${Partition}:memorydb:${Region}:${Account}:acl/.*",
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:subnetgroup/.*"
    ],
    "memorydb:createmultiregioncluster": [
      "arn:${Partition}:memorydb::${Account}:multiregionparametergroup/.*"
    ],
    "memorydb:createsnapshot": [
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*"
    ],
    "memorydb:deleteacl": [
      "arn:${Partition}:memorydb:${Region}:${Account}:acl/.*"
    ],
    "memorydb:deletecluster": [
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:snapshot/.*"
    ],
    "memorydb:deletemultiregioncluster": [
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*"
    ],
    "memorydb:deleteparametergroup": [
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*"
    ],
    "memorydb:deletesnapshot": [
      "arn:${Partition}:memorydb:${Region}:${Account}:snapshot/.*"
    ],
    "memorydb:deletesubnetgroup": [
      "arn:${Partition}:memorydb:${Region}:${Account}:subnetgroup/.*"
    ],
    "memorydb:deleteuser": [
      "arn:${Partition}:memorydb:${Region}:${Account}:user/.*"
    ],
    "memorydb:describeacls": [
      "arn:${Partition}:memorydb:${Region}:${Account}:acl/.*"
    ],
    "memorydb:describeclusters": [
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*"
    ],
    "memorydb:describemultiregionclusters": [
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*"
    ],
    "memorydb:describemultiregionparametergroups": [
      "arn:${Partition}:memorydb::${Account}:multiregionparametergroup/.*"
    ],
    "memorydb:describemultiregionparameters": [
      "arn:${Partition}:memorydb::${Account}:multiregionparametergroup/.*"
    ],
    "memorydb:describeparametergroups": [
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*"
    ],
    "memorydb:describeparameters": [
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*"
    ],
    "memorydb:describereservednodes": [
      "arn:${Partition}:memorydb:${Region}:${Account}:reservednode/.*"
    ],
    "memorydb:describesnapshots": [
      "arn:${Partition}:memorydb:${Region}:${Account}:snapshot/.*"
    ],
    "memorydb:describesubnetgroups": [
      "arn:${Partition}:memorydb:${Region}:${Account}:subnetgroup/.*"
    ],
    "memorydb:describeusers": [
      "arn:${Partition}:memorydb:${Region}:${Account}:user/.*"
    ],
    "memorydb:failovershard": [
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*"
    ],
    "memorydb:listallowedmultiregionclusterupdates": [
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*"
    ],
    "memorydb:listallowednodetypeupdates": [
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*"
    ],
    "memorydb:listtags": [
      "arn:${Partition}:memorydb:${Region}:${Account}:acl/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:subnetgroup/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:user/.*"
    ],
    "memorydb:pausemultiregionclusterreplication": [
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*"
    ],
    "memorydb:purchasereservednodesoffering": [
      "arn:${Partition}:memorydb:${Region}:${Account}:reservednode/.*"
    ],
    "memorydb:resetparametergroup": [
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*"
    ],
    "memorydb:tagresource": [
      "arn:${Partition}:memorydb:${Region}:${Account}:acl/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:reservednode/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:subnetgroup/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:user/.*"
    ],
    "memorydb:untagresource": [
      "arn:${Partition}:memorydb:${Region}:${Account}:acl/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:subnetgroup/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:user/.*"
    ],
    "memorydb:updateacl": [
      "arn:${Partition}:memorydb:${Region}:${Account}:acl/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:user/.*"
    ],
    "memorydb:updatecluster": [
      "arn:${Partition}:memorydb:${Region}:${Account}:acl/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*"
    ],
    "memorydb:updatemultiregioncluster": [
      "arn:${Partition}:memorydb::${Account}:multiregioncluster/.*",
      "arn:${Partition}:memorydb::${Account}:multiregionparametergroup/.*"
    ],
    "memorydb:updateparametergroup": [
      "arn:${Partition}:memorydb:${Region}:${Account}:parametergroup/.*"
    ],
    "memorydb:updatesubnetgroup": [
      "arn:${Partition}:memorydb:${Region}:${Account}:subnetgroup/.*"
    ],
    "memorydb:updateuser": [
      "arn:${Partition}:memorydb:${Region}:${Account}:user/.*"
    ],
    "mgh:acceptconnection": [
      "arn:${Partition}:mgh:${Region}:${Account}:.*"
    ],
    "mgh:associateautomationunitrole": [
      "arn:${Partition}:mgh:${Region}:${Account}:automation-unit/.*"
    ],
    "mgh:associatecreatedartifact": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:associatediscoveredresource": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:associatesourceresource": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:batchassociateiamrolewithconnection": [
      "arn:${Partition}:mgh:${Region}:${Account}:.*"
    ],
    "mgh:batchdisassociateiamrolefromconnection": [
      "arn:${Partition}:mgh:${Region}:${Account}:.*"
    ],
    "mgh:createprogressupdatestream": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:deleteautomationrun": [
      "arn:${Partition}:mgh:${Region}:${Account}:automation-run/.*"
    ],
    "mgh:deleteautomationunit": [
      "arn:${Partition}:mgh:${Region}:${Account}:automation-unit/.*"
    ],
    "mgh:deleteconnection": [
      "arn:${Partition}:mgh:${Region}:${Account}:.*"
    ],
    "mgh:deleteprogressupdatestream": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:describeautomationrun": [
      "arn:${Partition}:mgh:${Region}:${Account}:automation-run/.*"
    ],
    "mgh:describeautomationunit": [
      "arn:${Partition}:mgh:${Region}:${Account}:automation-unit/.*"
    ],
    "mgh:describemigrationtask": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:disassociateautomationunitrole": [
      "arn:${Partition}:mgh:${Region}:${Account}:automation-unit/.*"
    ],
    "mgh:disassociatecreatedartifact": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:disassociatediscoveredresource": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:disassociatesourceresource": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:getconnection": [
      "arn:${Partition}:mgh:${Region}:${Account}:.*"
    ],
    "mgh:importmigrationtask": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:listconnectionroles": [
      "arn:${Partition}:mgh:${Region}:${Account}:.*"
    ],
    "mgh:listcreatedartifacts": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:listdiscoveredresources": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:listmigrationtaskupdates": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:listsourceresources": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:notifymigrationtaskstate": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:putresourceattributes": [
      "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/.*"
    ],
    "mgh:rejectconnection": [
      "arn:${Partition}:mgh:${Region}:${Account}:.*"
    ],
    "mgn:archiveapplication": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*"
    ],
    "mgn:archivewave": [
      "arn:${Partition}:mgn:${Region}:${Account}:wave/.*"
    ],
    "mgn:associateapplications": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:wave/.*"
    ],
    "mgn:associatesourceservers": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:batchcreatevolumesnapshotgroupformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:changeserverlifecyclestate": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:deleteapplication": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*"
    ],
    "mgn:deleteconnector": [
      "arn:${Partition}:mgn:${Region}:${Account}:connector/.*"
    ],
    "mgn:deletejob": [
      "arn:${Partition}:mgn:${Region}:${Account}:job/.*"
    ],
    "mgn:deletelaunchconfigurationtemplate": [
      "arn:${Partition}:mgn:${Region}:${Account}:launch-configuration-template/.*"
    ],
    "mgn:deletenetworkmigrationdefinition": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:deletereplicationconfigurationtemplate": [
      "arn:${Partition}:mgn:${Region}:${Account}:replication-configuration-template/.*"
    ],
    "mgn:deletesourceserver": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:deletevcenterclient": [
      "arn:${Partition}:mgn:${Region}:${Account}:vcenter-client/.*"
    ],
    "mgn:deletewave": [
      "arn:${Partition}:mgn:${Region}:${Account}:wave/.*"
    ],
    "mgn:describejoblogitems": [
      "arn:${Partition}:mgn:${Region}:${Account}:job/.*"
    ],
    "mgn:disassociateapplications": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:wave/.*"
    ],
    "mgn:disassociatesourceservers": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:disconnectfromservice": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:finalizecutover": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:getagentcommandformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:getagentconfirmedresumeinfoformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:getagentreplicationinfoformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:getagentruntimeconfigurationformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:getagentsnapshotcreditsformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:getlaunchconfiguration": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:getnetworkmigrationdefinition": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:getnetworkmigrationmappersegmentconstruct": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:getreplicationconfiguration": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:getvcenterclientcommandsformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:vcenter-client/.*"
    ],
    "mgn:issueclientcertificateformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:listexporterrors": [
      "arn:${Partition}:mgn:${Region}:${Account}:export/.*"
    ],
    "mgn:listimporterrors": [
      "arn:${Partition}:mgn:${Region}:${Account}:import/.*"
    ],
    "mgn:listnetworkmigrationanalyses": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationanalysisresults": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationcodegenerations": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationcodegenerationsegments": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationdeployedstacks": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationdeployedstacksdeletions": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationdeployments": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationexecutionartifacts": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationexecutions": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationmappersegmentconstructs": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationmappersegments": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationmappings": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listnetworkmigrationmappingupdates": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:listsourceserveractions": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:listtemplateactions": [
      "arn:${Partition}:mgn:${Region}:${Account}:launch-configuration-template/.*"
    ],
    "mgn:markasarchived": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:notifyagentauthenticationformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:notifyagentconnectedformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:notifyagentdisconnectedformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:notifyagentreplicationprogressformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:notifyvcenterclientstartedformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:vcenter-client/.*"
    ],
    "mgn:pausereplication": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:putsourceserveraction": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:puttemplateaction": [
      "arn:${Partition}:mgn:${Region}:${Account}:launch-configuration-template/.*"
    ],
    "mgn:removesourceserveraction": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:removetemplateaction": [
      "arn:${Partition}:mgn:${Region}:${Account}:launch-configuration-template/.*"
    ],
    "mgn:resumereplication": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:retrydatareplication": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:sendagentlogsformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:sendagentmetricsformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:sendvcenterclientcommandresultformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:vcenter-client/.*"
    ],
    "mgn:sendvcenterclientlogsformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:vcenter-client/.*"
    ],
    "mgn:sendvcenterclientmetricsformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:vcenter-client/.*"
    ],
    "mgn:startcutover": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:startnetworkmigrationanalysis": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:startnetworkmigrationcodegeneration": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:startnetworkmigrationdeployedstacksdeletion": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:startnetworkmigrationdeployment": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:startnetworkmigrationmapping": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:startnetworkmigrationmappingupdate": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:startreplication": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:starttest": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:stopreplication": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:tagresource": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:connector/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:export/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:import/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:job/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:launch-configuration-template/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:replication-configuration-template/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:vcenter-client/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:wave/.*"
    ],
    "mgn:terminatetargetinstances": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:unarchiveapplication": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*"
    ],
    "mgn:unarchivewave": [
      "arn:${Partition}:mgn:${Region}:${Account}:wave/.*"
    ],
    "mgn:untagresource": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:connector/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:job/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:launch-configuration-template/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:replication-configuration-template/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:vcenter-client/.*",
      "arn:${Partition}:mgn:${Region}:${Account}:wave/.*"
    ],
    "mgn:updateagentbacklogformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:updateagentconversioninfoformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:updateagentreplicationinfoformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:updateagentreplicationprocessstateformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:updateagentsourcepropertiesformgn": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:updateapplication": [
      "arn:${Partition}:mgn:${Region}:${Account}:application/.*"
    ],
    "mgn:updateconnector": [
      "arn:${Partition}:mgn:${Region}:${Account}:connector/.*"
    ],
    "mgn:updatelaunchconfiguration": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:updatelaunchconfigurationtemplate": [
      "arn:${Partition}:mgn:${Region}:${Account}:launch-configuration-template/.*"
    ],
    "mgn:updatenetworkmigrationdefinition": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:updatenetworkmigrationmappersegment": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:updatenetworkmigrationmappersegmentconstruct": [
      "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/.*"
    ],
    "mgn:updatereplicationconfiguration": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:updatereplicationconfigurationtemplate": [
      "arn:${Partition}:mgn:${Region}:${Account}:replication-configuration-template/.*"
    ],
    "mgn:updatesourceserver": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:updatesourceserverreplicationtype": [
      "arn:${Partition}:mgn:${Region}:${Account}:source-server/.*"
    ],
    "mgn:updatewave": [
      "arn:${Partition}:mgn:${Region}:${Account}:wave/.*"
    ],
    "migrationhub-orchestrator:createworkflow": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*"
    ],
    "migrationhub-orchestrator:createworkflowstep": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:createworkflowstepgroup": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:deletetemplate": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*"
    ],
    "migrationhub-orchestrator:deleteworkflow": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:deleteworkflowstep": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:deleteworkflowstepgroup": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:gettemplate": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*"
    ],
    "migrationhub-orchestrator:gettemplatestep": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*"
    ],
    "migrationhub-orchestrator:gettemplatestepgroup": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*"
    ],
    "migrationhub-orchestrator:getworkflow": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:getworkflowstep": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:getworkflowstepgroup": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:listtagsforresource": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*",
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:listtemplatestepgroups": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*"
    ],
    "migrationhub-orchestrator:listtemplatesteps": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*"
    ],
    "migrationhub-orchestrator:listworkflowstepgroups": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:listworkflowsteps": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:retryworkflowstep": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:startworkflow": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:stopworkflow": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:tagresource": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*",
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:untagresource": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*",
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:updatetemplate": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:template/.*"
    ],
    "migrationhub-orchestrator:updateworkflow": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:updateworkflowstep": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "migrationhub-orchestrator:updateworkflowstepgroup": [
      "arn:${Partition}:migrationhub-orchestrator:${Region}:${Account}:workflow/.*"
    ],
    "mobiletargeting:createapp": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/*"
    ],
    "mobiletargeting:createcampaign": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:createemailtemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:createexportjob": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:createimportjob": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:createinapptemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:createjourney": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:createpushtemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:createrecommenderconfiguration": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:recommenders/*"
    ],
    "mobiletargeting:createsegment": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:createsmstemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:createvoicetemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:deleteadmchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deleteapnschannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deleteapnssandboxchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deleteapnsvoipchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deleteapnsvoipsandboxchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deleteapp": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deletebaiduchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deletecampaign": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deleteemailchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deleteemailtemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:deleteendpoint": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deleteeventstream": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deletegcmchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deleteinapptemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:deletejourney": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deletepushtemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:deleterecommenderconfiguration": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:recommenders/.*"
    ],
    "mobiletargeting:deletesegment": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deletesmschannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deletesmstemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:deleteuserendpoints": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deletevoicechannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:deletevoicetemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:getadmchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getapnschannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getapnssandboxchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getapnsvoipchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getapnsvoipsandboxchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getapp": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getapplicationdaterangekpi": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getapplicationsettings": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getapps": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/*"
    ],
    "mobiletargeting:getbaiduchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getcampaign": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getcampaignactivities": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getcampaigndaterangekpi": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getcampaigns": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getcampaignversion": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getcampaignversions": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getchannels": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getemailchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getemailtemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:getendpoint": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:geteventstream": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getexportjob": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getexportjobs": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getgcmchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getimportjob": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getimportjobs": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getinappmessages": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getinapptemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:getjourney": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getjourneydaterangekpi": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getjourneyexecutionactivitymetrics": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getjourneyexecutionmetrics": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getjourneyrunexecutionactivitymetrics": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getjourneyrunexecutionmetrics": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getjourneyruns": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getpushtemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:getrecommenderconfiguration": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:recommenders/.*"
    ],
    "mobiletargeting:getrecommenderconfigurations": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:recommenders/*"
    ],
    "mobiletargeting:getreports": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:reports"
    ],
    "mobiletargeting:getsegment": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getsegmentexportjobs": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getsegmentimportjobs": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getsegments": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getsegmentversion": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getsegmentversions": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getsmschannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getsmstemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:getuserendpoints": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getvoicechannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:getvoicetemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:listjourneys": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:listtagsforresource": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*",
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:listtemplates": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates"
    ],
    "mobiletargeting:listtemplateversions": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:phonenumbervalidate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:phone/number/validate"
    ],
    "mobiletargeting:putevents": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:puteventstream": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:removeattributes": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:sendmessages": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:sendotpmessage": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:sendusersmessages": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:tagresource": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*",
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:untagresource": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*",
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:updateadmchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updateapnschannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updateapnssandboxchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updateapnsvoipchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updateapnsvoipsandboxchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updateapplicationsettings": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updatebaiduchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updatecampaign": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updateemailchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updateemailtemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:updateendpoint": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updateendpointsbatch": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updategcmchannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updateinapptemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:updatejourney": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updatejourneystate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updatepushtemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:updaterecommenderconfiguration": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:recommenders/.*"
    ],
    "mobiletargeting:updatesegment": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updatesmschannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updatesmstemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:updatetemplateactiveversion": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:updatevoicechannel": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "mobiletargeting:updatevoicetemplate": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/.*"
    ],
    "mobiletargeting:verifyotpmessage": [
      "arn:${Partition}:mobiletargeting:${Region}:${Account}:apps/.*"
    ],
    "monitron:associateprojectadminuser": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:createprojectuserassociation": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:createuseraccessroleassociation": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:deleteproject": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:deleteprojectuserassociation": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:deleteuseraccessroleassociation": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:disassociateprojectadminuser": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:getproject": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:getprojectadminuser": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:listprojectadminusers": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:listprojectuserassociations": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:listtagsforresource": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:listuseraccessroleassociations": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:tagresource": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:untagresource": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "monitron:updateproject": [
      "arn:${Partition}:monitron:${Region}:${Account}:project/.*"
    ],
    "mpa:cancelsession": [
      "arn:${Partition}:mpa:${Region}:${Account}:session/.*"
    ],
    "mpa:createapprovalteam": [
      "arn:${Partition}:mpa:${Region}:${Account}:approval-team/.*"
    ],
    "mpa:createidentitysource": [
      "arn:${Partition}:mpa:${Region}:${Account}:identity-source/.*"
    ],
    "mpa:deleteidentitysource": [
      "arn:${Partition}:mpa:${Region}:${Account}:identity-source/.*"
    ],
    "mpa:deleteinactiveapprovalteamversion": [
      "arn:${Partition}:mpa:${Region}:${Account}:approval-team/.*"
    ],
    "mpa:getapprovalteam": [
      "arn:${Partition}:mpa:${Region}:${Account}:approval-team/.*"
    ],
    "mpa:getidentitysource": [
      "arn:${Partition}:mpa:${Region}:${Account}:identity-source/.*"
    ],
    "mpa:getsession": [
      "arn:${Partition}:mpa:${Region}:${Account}:session/.*"
    ],
    "mpa:startactiveapprovalteamdeletion": [
      "arn:${Partition}:mpa:${Region}:${Account}:approval-team/.*"
    ],
    "mpa:startapprovalteambaseline": [
      "arn:${Partition}:mpa:${Region}:${Account}:approval-team/.*"
    ],
    "mpa:startsession": [
      "arn:${Partition}:mpa:${Region}:${Account}:session/.*"
    ],
    "mpa:updateapprovalteam": [
      "arn:${Partition}:mpa:${Region}:${Account}:approval-team/.*"
    ],
    "mq:createreplicabroker": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:createtags": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*",
      "arn:${Partition}:mq:${Region}:${Account}:configuration:.*"
    ],
    "mq:createuser": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:deletebroker": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:deleteconfiguration": [
      "arn:${Partition}:mq:${Region}:${Account}:configuration:.*"
    ],
    "mq:deletetags": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*",
      "arn:${Partition}:mq:${Region}:${Account}:configuration:.*"
    ],
    "mq:deleteuser": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:describebroker": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:describeconfiguration": [
      "arn:${Partition}:mq:${Region}:${Account}:configuration:.*"
    ],
    "mq:describeconfigurationrevision": [
      "arn:${Partition}:mq:${Region}:${Account}:configuration:.*"
    ],
    "mq:describesharedresources": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:describeuser": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:listconfigurationrevisions": [
      "arn:${Partition}:mq:${Region}:${Account}:configuration:.*"
    ],
    "mq:listtags": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*",
      "arn:${Partition}:mq:${Region}:${Account}:configuration:.*"
    ],
    "mq:listusers": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:promote": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:rebootbroker": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:updatebroker": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:updatebrokeraccessconfiguration": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "mq:updateconfiguration": [
      "arn:${Partition}:mq:${Region}:${Account}:configuration:.*"
    ],
    "mq:updateuser": [
      "arn:${Partition}:mq:${Region}:${Account}:broker:.*"
    ],
    "neptune-db:cancelloaderjob": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:cancelmldataprocessingjob": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:cancelmlmodeltrainingjob": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:cancelmlmodeltransformjob": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:cancelquery": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:connect": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:createmlendpoint": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:deletedataviaquery": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:deletemlendpoint": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:deletestatistics": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getenginestatus": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getgraphsummary": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getloaderjobstatus": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getmldataprocessingjobstatus": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getmlendpointstatus": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getmlmodeltrainingjobstatus": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getmlmodeltransformjobstatus": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getquerystatus": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getstatisticsstatus": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:getstreamrecords": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:listloaderjobs": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:listmldataprocessingjobs": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:listmlendpoints": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:listmlmodeltrainingjobs": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:listmlmodeltransformjobs": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:managestatistics": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:readdataviaquery": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:resetdatabase": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:startloaderjob": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:startmldataprocessingjob": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:startmlmodeltrainingjob": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:startmlmodeltransformjob": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-db:writedataviaquery": [
      "arn:${Partition}:neptune-db:${Region}:${Account}:.*"
    ],
    "neptune-graph:cancelexporttask": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:export-task/.*"
    ],
    "neptune-graph:cancelimporttask": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:import-task/.*"
    ],
    "neptune-graph:cancelquery": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:creategraph": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:creategraphsnapshot": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*",
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph-snapshot/.*"
    ],
    "neptune-graph:creategraphusingimporttask": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*",
      "arn:${Partition}:neptune-graph:${Region}:${Account}:import-task/.*"
    ],
    "neptune-graph:createprivategraphendpoint": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:deletedataviaquery": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:deletegraph": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:deletegraphsnapshot": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph-snapshot/.*"
    ],
    "neptune-graph:deleteprivategraphendpoint": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:getenginestatus": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:getexporttask": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:export-task/.*"
    ],
    "neptune-graph:getgraph": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:getgraphsnapshot": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph-snapshot/.*"
    ],
    "neptune-graph:getgraphsummary": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:getimporttask": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:import-task/.*"
    ],
    "neptune-graph:getprivategraphendpoint": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:getquerystatus": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:getstatisticsstatus": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:listexporttasks": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:export-task/.*"
    ],
    "neptune-graph:listgraphs": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:listgraphsnapshots": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph-snapshot/.*"
    ],
    "neptune-graph:listimporttasks": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:import-task/.*"
    ],
    "neptune-graph:listprivategraphendpoints": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:listqueries": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:listtagsforresource": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*",
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph-snapshot/.*"
    ],
    "neptune-graph:readdataviaquery": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:resetgraph": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:restoregraphfromsnapshot": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*",
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph-snapshot/.*"
    ],
    "neptune-graph:startexporttask": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:export-task/.*",
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:startgraph": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:startimporttask": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*",
      "arn:${Partition}:neptune-graph:${Region}:${Account}:import-task/.*"
    ],
    "neptune-graph:stopgraph": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:tagresource": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*",
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph-snapshot/.*"
    ],
    "neptune-graph:untagresource": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*",
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph-snapshot/.*"
    ],
    "neptune-graph:updategraph": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "neptune-graph:writedataviaquery": [
      "arn:${Partition}:neptune-graph:${Region}:${Account}:graph/.*"
    ],
    "network-firewall:acceptnetworkfirewalltransitgatewayattachment": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:associateavailabilityzones": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:associatefirewallpolicy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*"
    ],
    "network-firewall:associatesubnets": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:attachrulegroupstoproxyconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:createcontainerassociation": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:container-association/.*"
    ],
    "network-firewall:createfirewall": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*"
    ],
    "network-firewall:createfirewallpolicy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*"
    ],
    "network-firewall:createproxy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*"
    ],
    "network-firewall:createproxyconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:createproxyrulegroup": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:createproxyrules": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:createrulegroup": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*"
    ],
    "network-firewall:createtlsinspectionconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*"
    ],
    "network-firewall:createvpcendpointassociation": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/.*"
    ],
    "network-firewall:deletecontainerassociation": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:container-association/.*"
    ],
    "network-firewall:deletefirewall": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:deletefirewallpolicy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*"
    ],
    "network-firewall:deletenetworkfirewalltransitgatewayattachment": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:deleteproxy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy/.*"
    ],
    "network-firewall:deleteproxyconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*"
    ],
    "network-firewall:deleteproxyrulegroup": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:deleteproxyrules": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:deleteresourcepolicy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*"
    ],
    "network-firewall:deleterulegroup": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*"
    ],
    "network-firewall:deletetlsinspectionconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*"
    ],
    "network-firewall:deletevpcendpointassociation": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/.*"
    ],
    "network-firewall:describecontainerassociation": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:container-association/.*"
    ],
    "network-firewall:describefirewall": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:describefirewallmetadata": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:describefirewallpolicy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*"
    ],
    "network-firewall:describeflowoperation": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:describeloggingconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:describeproxy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy/.*"
    ],
    "network-firewall:describeproxyconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*"
    ],
    "network-firewall:describeproxyrule": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:describeproxyrulegroup": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:describeresourcepolicy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*"
    ],
    "network-firewall:describerulegroup": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*"
    ],
    "network-firewall:describerulegroupmetadata": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*"
    ],
    "network-firewall:describerulegroupsummary": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*"
    ],
    "network-firewall:describetlsinspectionconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*"
    ],
    "network-firewall:describevpcendpointassociation": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/.*"
    ],
    "network-firewall:detachrulegroupsfromproxyconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:disassociateavailabilityzones": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:disassociatesubnets": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:getanalysisreportresults": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:listanalysisreports": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:listfirewallpolicies": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*"
    ],
    "network-firewall:listfirewalls": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:listflowoperationresults": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:listflowoperations": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:listproxies": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy/.*"
    ],
    "network-firewall:listproxyconfigurations": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*"
    ],
    "network-firewall:listproxyrulegroups": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:listtagsforresource": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:container-association/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/.*"
    ],
    "network-firewall:listtlsinspectionconfigurations": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*"
    ],
    "network-firewall:listvpcendpointassociations": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/.*"
    ],
    "network-firewall:putresourcepolicy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*"
    ],
    "network-firewall:rejectnetworkfirewalltransitgatewayattachment": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:startanalysisreport": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:startflowcapture": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:startflowflush": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:tagresource": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:container-association/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/.*"
    ],
    "network-firewall:untagresource": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:container-association/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:vpc-endpoint-association/.*"
    ],
    "network-firewall:updateavailabilityzonechangeprotection": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:updatecontainerassociation": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:container-association/.*"
    ],
    "network-firewall:updatefirewallanalysissettings": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:updatefirewalldeleteprotection": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:updatefirewalldescription": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:updatefirewallencryptionconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:updatefirewallpolicy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*"
    ],
    "network-firewall:updatefirewallpolicychangeprotection": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:updateloggingconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:updateproxy": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy/.*"
    ],
    "network-firewall:updateproxyconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*"
    ],
    "network-firewall:updateproxyrule": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:updateproxyrulegrouppriorities": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-configuration/.*"
    ],
    "network-firewall:updateproxyrulepriorities": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:proxy-rule-group/.*"
    ],
    "network-firewall:updaterulegroup": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateful-rulegroup/.*",
      "arn:${Partition}:network-firewall:${Region}:${Account}:stateless-rulegroup/.*"
    ],
    "network-firewall:updatesubnetchangeprotection": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:firewall/.*"
    ],
    "network-firewall:updatetlsinspectionconfiguration": [
      "arn:${Partition}:network-firewall:${Region}:${Account}:tls-configuration/.*"
    ],
    "networkflowmonitor:createmonitor": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkflowmonitor:deletemonitor": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkflowmonitor:deletescope": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:getmonitor": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkflowmonitor:getqueryresultsmonitortopcontributors": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkflowmonitor:getqueryresultsworkloadinsightstopcontributors": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:getqueryresultsworkloadinsightstopcontributorsdata": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:getquerystatusmonitortopcontributors": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkflowmonitor:getquerystatusworkloadinsightstopcontributors": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:getquerystatusworkloadinsightstopcontributorsdata": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:getscope": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:listtagsforresource": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:startquerymonitortopcontributors": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkflowmonitor:startqueryworkloadinsightstopcontributors": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:startqueryworkloadinsightstopcontributorsdata": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:stopquerymonitortopcontributors": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkflowmonitor:stopqueryworkloadinsightstopcontributors": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:stopqueryworkloadinsightstopcontributorsdata": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:tagresource": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:untagresource": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkflowmonitor:updatemonitor": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkflowmonitor:updatescope": [
      "arn:${Partition}:networkflowmonitor:${Region}:${Account}:scope/.*"
    ],
    "networkmanager:acceptattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:associateconnectpeer": [
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:associatecustomergateway": [
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*"
    ],
    "networkmanager:associatelink": [
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*"
    ],
    "networkmanager:associatetransitgatewayconnectpeer": [
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*"
    ],
    "networkmanager:createconnectattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*",
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:createconnection": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:createconnectpeer": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:createcorenetwork": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:createcorenetworkprefixlistassociation": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:createdevice": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:createdirectconnectgatewayattachment": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:createlink": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:site/.*"
    ],
    "networkmanager:createsite": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:createsitetositevpnattachment": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:createtransitgatewaypeering": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:createtransitgatewayroutetableattachment": [
      "arn:${Partition}:networkmanager::${Account}:peering/.*"
    ],
    "networkmanager:createvpcattachment": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:deleteattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:deleteconnection": [
      "arn:${Partition}:networkmanager::${Account}:connection/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:deleteconnectpeer": [
      "arn:${Partition}:networkmanager::${Account}:connect-peer/.*"
    ],
    "networkmanager:deletecorenetwork": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:deletecorenetworkpolicyversion": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:deletecorenetworkprefixlistassociation": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:deletedevice": [
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:deleteglobalnetwork": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:deletelink": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*"
    ],
    "networkmanager:deletepeering": [
      "arn:${Partition}:networkmanager::${Account}:peering/.*"
    ],
    "networkmanager:deleteresourcepolicy": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:deletesite": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:site/.*"
    ],
    "networkmanager:deregistertransitgateway": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:describeglobalnetworks": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:disassociateconnectpeer": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:disassociatecustomergateway": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:disassociatelink": [
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*"
    ],
    "networkmanager:disassociatetransitgatewayconnectpeer": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:executecorenetworkchangeset": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:getconnectattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:getconnections": [
      "arn:${Partition}:networkmanager::${Account}:connection/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getconnectpeer": [
      "arn:${Partition}:networkmanager::${Account}:connect-peer/.*"
    ],
    "networkmanager:getconnectpeerassociations": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getcorenetwork": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:getcorenetworkchangeevents": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:getcorenetworkchangeset": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:getcorenetworkpolicy": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:getcustomergatewayassociations": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getdevices": [
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getdirectconnectgatewayattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:getlinkassociations": [
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*"
    ],
    "networkmanager:getlinks": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*"
    ],
    "networkmanager:getnetworkresourcecounts": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getnetworkresourcerelationships": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getnetworkresources": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getnetworkroutes": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getnetworktelemetry": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getresourcepolicy": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:getrouteanalysis": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:getsites": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:site/.*"
    ],
    "networkmanager:getsitetositevpnattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:gettransitgatewayconnectpeerassociations": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:gettransitgatewaypeering": [
      "arn:${Partition}:networkmanager::${Account}:peering/.*"
    ],
    "networkmanager:gettransitgatewayregistrations": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:gettransitgatewayroutetableattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:getvpcattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:listattachmentroutingpolicyassociations": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:listattachments": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:listconnectpeers": [
      "arn:${Partition}:networkmanager::${Account}:connect-peer/.*"
    ],
    "networkmanager:listcorenetworkpolicyversions": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:listcorenetworkprefixlistassociations": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:listcorenetworkroutinginformation": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:listtagsforresource": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*",
      "arn:${Partition}:networkmanager::${Account}:connect-peer/.*",
      "arn:${Partition}:networkmanager::${Account}:connection/.*",
      "arn:${Partition}:networkmanager::${Account}:core-network/.*",
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*",
      "arn:${Partition}:networkmanager::${Account}:peering/.*",
      "arn:${Partition}:networkmanager::${Account}:site/.*"
    ],
    "networkmanager:putattachmentroutingpolicylabel": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*",
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:putcorenetworkpolicy": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:putresourcepolicy": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:registertransitgateway": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:rejectattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:removeattachmentroutingpolicylabel": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*",
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:restorecorenetworkpolicyversion": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:startrouteanalysis": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:tagresource": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*",
      "arn:${Partition}:networkmanager::${Account}:connect-peer/.*",
      "arn:${Partition}:networkmanager::${Account}:connection/.*",
      "arn:${Partition}:networkmanager::${Account}:core-network/.*",
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*",
      "arn:${Partition}:networkmanager::${Account}:peering/.*",
      "arn:${Partition}:networkmanager::${Account}:site/.*"
    ],
    "networkmanager:untagresource": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*",
      "arn:${Partition}:networkmanager::${Account}:connect-peer/.*",
      "arn:${Partition}:networkmanager::${Account}:connection/.*",
      "arn:${Partition}:networkmanager::${Account}:core-network/.*",
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*",
      "arn:${Partition}:networkmanager::${Account}:peering/.*",
      "arn:${Partition}:networkmanager::${Account}:site/.*"
    ],
    "networkmanager:updateconnection": [
      "arn:${Partition}:networkmanager::${Account}:connection/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:updatecorenetwork": [
      "arn:${Partition}:networkmanager::${Account}:core-network/.*"
    ],
    "networkmanager:updatedevice": [
      "arn:${Partition}:networkmanager::${Account}:device/.*",
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:updatedirectconnectgatewayattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmanager:updateglobalnetwork": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:updatelink": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:link/.*"
    ],
    "networkmanager:updatenetworkresourcemetadata": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*"
    ],
    "networkmanager:updatesite": [
      "arn:${Partition}:networkmanager::${Account}:global-network/.*",
      "arn:${Partition}:networkmanager::${Account}:site/.*"
    ],
    "networkmanager:updatevpcattachment": [
      "arn:${Partition}:networkmanager::${Account}:attachment/.*"
    ],
    "networkmonitor:createmonitor": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkmonitor:deletemonitor": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkmonitor:deleteprobe": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:probe/.*"
    ],
    "networkmonitor:getmonitor": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkmonitor:getprobe": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:probe/.*"
    ],
    "networkmonitor:listtagsforresource": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:networkmonitor:${Region}:${Account}:probe/.*"
    ],
    "networkmonitor:tagresource": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:networkmonitor:${Region}:${Account}:probe/.*"
    ],
    "networkmonitor:untagresource": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:monitor/.*",
      "arn:${Partition}:networkmonitor:${Region}:${Account}:probe/.*"
    ],
    "networkmonitor:updatemonitor": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:monitor/.*"
    ],
    "networkmonitor:updateprobe": [
      "arn:${Partition}:networkmonitor:${Region}:${Account}:probe/.*"
    ],
    "nimble:accepteulas": [
      "arn:${Partition}:nimble:${Region}:${Account}:eula/.*"
    ],
    "nimble:createlaunchprofile": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:createstreamingimage": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:createstreamingsession": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:createstreamingsessionstream": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session/.*"
    ],
    "nimble:createstudio": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:createstudiocomponent": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:deletelaunchprofile": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:deletelaunchprofilemember": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:deletestreamingimage": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-image/.*"
    ],
    "nimble:deletestreamingsession": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session/.*"
    ],
    "nimble:deletestudio": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:deletestudiocomponent": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio-component/.*"
    ],
    "nimble:deletestudiomember": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:geteula": [
      "arn:${Partition}:nimble:${Region}:${Account}:eula/.*"
    ],
    "nimble:getlaunchprofile": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:getlaunchprofiledetails": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:getlaunchprofileinitialization": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:getlaunchprofilemember": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:getstreamingimage": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-image/.*"
    ],
    "nimble:getstreamingsession": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session/.*"
    ],
    "nimble:getstreamingsessionbackup": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session-backup/.*"
    ],
    "nimble:getstreamingsessionstream": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session/.*"
    ],
    "nimble:getstudio": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:getstudiocomponent": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio-component/.*"
    ],
    "nimble:getstudiomember": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:listeulaacceptances": [
      "arn:${Partition}:nimble:${Region}:${Account}:eula-acceptance/.*"
    ],
    "nimble:listeulas": [
      "arn:${Partition}:nimble:${Region}:${Account}:eula/.*"
    ],
    "nimble:listlaunchprofilemembers": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:listlaunchprofiles": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:liststreamingimages": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:liststreamingsessionbackups": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:liststreamingsessions": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:liststudiocomponents": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:liststudiomembers": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:listtagsforresource": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-image/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session-backup/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:studio-component/.*"
    ],
    "nimble:putlaunchprofilemembers": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:putstudiologevents": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:putstudiomembers": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:startstreamingsession": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session-backup/.*"
    ],
    "nimble:startstudiossoconfigurationrepair": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:stopstreamingsession": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session/.*"
    ],
    "nimble:tagresource": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-image/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session-backup/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:studio-component/.*"
    ],
    "nimble:untagresource": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-image/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-session-backup/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*",
      "arn:${Partition}:nimble:${Region}:${Account}:studio-component/.*"
    ],
    "nimble:updatelaunchprofile": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:updatelaunchprofilemember": [
      "arn:${Partition}:nimble:${Region}:${Account}:launch-profile/.*"
    ],
    "nimble:updatestreamingimage": [
      "arn:${Partition}:nimble:${Region}:${Account}:streaming-image/.*"
    ],
    "nimble:updatestudio": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio/.*"
    ],
    "nimble:updatestudiocomponent": [
      "arn:${Partition}:nimble:${Region}:${Account}:studio-component/.*"
    ],
    "notifications-contacts:activateemailcontact": [
      "arn:${Partition}:notifications-contacts::${Account}:emailcontact/.*"
    ],
    "notifications-contacts:deleteemailcontact": [
      "arn:${Partition}:notifications-contacts::${Account}:emailcontact/.*"
    ],
    "notifications-contacts:getemailcontact": [
      "arn:${Partition}:notifications-contacts::${Account}:emailcontact/.*"
    ],
    "notifications-contacts:sendactivationcode": [
      "arn:${Partition}:notifications-contacts::${Account}:emailcontact/.*"
    ],
    "notifications-contacts:tagresource": [
      "arn:${Partition}:notifications-contacts::${Account}:emailcontact/.*"
    ],
    "notifications-contacts:untagresource": [
      "arn:${Partition}:notifications-contacts::${Account}:emailcontact/.*"
    ],
    "notifications:associatechannel": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:associatemanagednotificationaccountcontact": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:associatemanagednotificationadditionalchannel": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:associateorganizationalunit": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:deleteeventrule": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:deletenotificationconfiguration": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:disassociatechannel": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:disassociatemanagednotificationaccountcontact": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:disassociatemanagednotificationadditionalchannel": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:disassociateorganizationalunit": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:geteventrule": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:getmanagednotificationchildevent": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:getmanagednotificationconfiguration": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:getmanagednotificationevent": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:getnotificationconfiguration": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:getnotificationevent": [
      "arn:${Partition}:notifications:${Region}:${Account}:configuration/.*"
    ],
    "notifications:listchannels": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:listmanagednotificationchannelassociations": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:listmemberaccounts": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:listorganizationalunits": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:subscribesensitiveevents": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:tagresource": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:untagresource": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:updateeventrule": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "notifications:updatemanagednotificationchannelassociation": [
      "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/.*"
    ],
    "notifications:updatenotificationconfiguration": [
      "arn:${Partition}:notifications::${Account}:configuration/.*"
    ],
    "nova-act:createact": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:createsession": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:createworkflowdefinition": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:createworkflowrun": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:deleteworkflowdefinition": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:deleteworkflowrun": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:getworkflowdefinition": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:getworkflowrun": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:invokeactstep": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:listacts": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:listsessions": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:listworkflowruns": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:updateact": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "nova-act:updateworkflowrun": [
      "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/.*"
    ],
    "oam:createlink": [
      "arn:${Partition}:oam:${Region}:${Account}:sink/.*"
    ],
    "oam:deletelink": [
      "arn:${Partition}:oam:${Region}:${Account}:link/.*"
    ],
    "oam:deletesink": [
      "arn:${Partition}:oam:${Region}:${Account}:sink/.*"
    ],
    "oam:getlink": [
      "arn:${Partition}:oam:${Region}:${Account}:link/.*"
    ],
    "oam:getsink": [
      "arn:${Partition}:oam:${Region}:${Account}:sink/.*"
    ],
    "oam:getsinkpolicy": [
      "arn:${Partition}:oam:${Region}:${Account}:sink/.*"
    ],
    "oam:listattachedlinks": [
      "arn:${Partition}:oam:${Region}:${Account}:sink/.*"
    ],
    "oam:listtagsforresource": [
      "arn:${Partition}:oam:${Region}:${Account}:link/.*",
      "arn:${Partition}:oam:${Region}:${Account}:sink/.*"
    ],
    "oam:putsinkpolicy": [
      "arn:${Partition}:oam:${Region}:${Account}:sink/.*"
    ],
    "oam:tagresource": [
      "arn:${Partition}:oam:${Region}:${Account}:link/.*",
      "arn:${Partition}:oam:${Region}:${Account}:sink/.*"
    ],
    "oam:untagresource": [
      "arn:${Partition}:oam:${Region}:${Account}:link/.*",
      "arn:${Partition}:oam:${Region}:${Account}:sink/.*"
    ],
    "oam:updatelink": [
      "arn:${Partition}:oam:${Region}:${Account}:link/.*"
    ],
    "observabilityadmin:createcentralizationrulefororganization": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/.*"
    ],
    "observabilityadmin:creates3tableintegration": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:s3tableintegration/.*"
    ],
    "observabilityadmin:createtelemetrypipeline": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-pipeline/.*"
    ],
    "observabilityadmin:createtelemetryrule": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/.*"
    ],
    "observabilityadmin:createtelemetryrulefororganization": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/.*"
    ],
    "observabilityadmin:deletecentralizationrulefororganization": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/.*"
    ],
    "observabilityadmin:deletes3tableintegration": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:s3tableintegration/.*"
    ],
    "observabilityadmin:deletetelemetrypipeline": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-pipeline/.*"
    ],
    "observabilityadmin:deletetelemetryrule": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/.*"
    ],
    "observabilityadmin:deletetelemetryrulefororganization": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/.*"
    ],
    "observabilityadmin:getcentralizationrulefororganization": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/.*"
    ],
    "observabilityadmin:gets3tableintegration": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:s3tableintegration/.*"
    ],
    "observabilityadmin:gettelemetrypipeline": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-pipeline/.*"
    ],
    "observabilityadmin:gettelemetryrule": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/.*"
    ],
    "observabilityadmin:gettelemetryrulefororganization": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/.*"
    ],
    "observabilityadmin:listtagsforresource": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:s3tableintegration/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-pipeline/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/.*"
    ],
    "observabilityadmin:tagresource": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:s3tableintegration/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-pipeline/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/.*"
    ],
    "observabilityadmin:untagresource": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:s3tableintegration/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-pipeline/.*",
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/.*"
    ],
    "observabilityadmin:updatecentralizationrulefororganization": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/.*"
    ],
    "observabilityadmin:updatetelemetrypipeline": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-pipeline/.*"
    ],
    "observabilityadmin:updatetelemetryrule": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/.*"
    ],
    "observabilityadmin:updatetelemetryrulefororganization": [
      "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/.*"
    ],
    "odb:associateiamroletoresource": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*"
    ],
    "odb:associatevirtualmachinestoexadbvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:exadb-vm-cluster/.*"
    ],
    "odb:createautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:createautonomousdatabasebackup": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:createautonomousdatabasewallet": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:createcloudautonomousvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:createcloudvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:createdbnode": [
      "arn:${Partition}:odb:${Region}:${Account}:db-node/.*"
    ],
    "odb:createexadbvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:createodbpeeringconnection": [
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:createoutboundintegration": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*"
    ],
    "odb:deleteautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:deleteautonomousdatabasebackup": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database-backup/.*"
    ],
    "odb:deletecloudautonomousvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*"
    ],
    "odb:deletecloudexadatainfrastructure": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*"
    ],
    "odb:deletecloudvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*"
    ],
    "odb:deletedbnode": [
      "arn:${Partition}:odb:${Region}:${Account}:db-node/.*"
    ],
    "odb:deleteexadbvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:exadb-vm-cluster/.*"
    ],
    "odb:deleteexascaledbstoragevault": [
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*"
    ],
    "odb:deleteodbnetwork": [
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:deleteodbpeeringconnection": [
      "arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/.*"
    ],
    "odb:deleteresourcepolicy": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*",
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:disassociateiamrolefromresource": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*"
    ],
    "odb:disassociatevirtualmachinesfromexadbvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:exadb-vm-cluster/.*"
    ],
    "odb:failoverautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:getautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:getautonomousdatabasebackup": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database-backup/.*"
    ],
    "odb:getautonomousdatabasewalletdetails": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:getcloudautonomousvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*"
    ],
    "odb:getcloudexadatainfrastructure": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*"
    ],
    "odb:getcloudexadatainfrastructureunallocatedresources": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*"
    ],
    "odb:getcloudvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*"
    ],
    "odb:getdbnode": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:db-node/.*"
    ],
    "odb:getdbserver": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*"
    ],
    "odb:getexadbvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:exadb-vm-cluster/.*"
    ],
    "odb:getexascaledbstoragevault": [
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*"
    ],
    "odb:getodbnetwork": [
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:getodbpeeringconnection": [
      "arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/.*"
    ],
    "odb:getresourcepolicy": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*",
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:listautonomousdatabasebackups": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:listautonomousdatabaseclones": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:listautonomousdatabasepeers": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:listautonomousvirtualmachines": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*"
    ],
    "odb:listcloudautonomousvmclusters": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*"
    ],
    "odb:listcloudvmclusters": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*"
    ],
    "odb:listdbnodes": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*"
    ],
    "odb:listdbservers": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*"
    ],
    "odb:listexadbvmclusters": [
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*"
    ],
    "odb:listodbpeeringconnections": [
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:listtagsforresource": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*",
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database-backup/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:db-node/.*",
      "arn:${Partition}:odb:${Region}:${Account}:exadb-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/.*"
    ],
    "odb:putresourcepolicy": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*",
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:rebootautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:rebootdbnode": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:db-node/.*"
    ],
    "odb:restoreautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:shrinkautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:startautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:startdbnode": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:db-node/.*"
    ],
    "odb:stopautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:stopdbnode": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:db-node/.*"
    ],
    "odb:switchoverautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:tagresource": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*",
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database-backup/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:db-node/.*",
      "arn:${Partition}:odb:${Region}:${Account}:exadb-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/.*"
    ],
    "odb:untagresource": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*",
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database-backup/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:db-node/.*",
      "arn:${Partition}:odb:${Region}:${Account}:exadb-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*",
      "arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/.*"
    ],
    "odb:updateautonomousdatabase": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database/.*"
    ],
    "odb:updateautonomousdatabasebackup": [
      "arn:${Partition}:odb:${Region}:${Account}:autonomous-database-backup/.*"
    ],
    "odb:updatecloudexadatainfrastructure": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/.*"
    ],
    "odb:updateexadbvmcluster": [
      "arn:${Partition}:odb:${Region}:${Account}:exadb-vm-cluster/.*"
    ],
    "odb:updateexascaledbstoragevault": [
      "arn:${Partition}:odb:${Region}:${Account}:exascale-db-storage-vault/.*"
    ],
    "odb:updateodbnetwork": [
      "arn:${Partition}:odb:${Region}:${Account}:odb-network/.*"
    ],
    "odb:updateodbpeeringconnection": [
      "arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/.*"
    ],
    "odb:updateoutboundintegration": [
      "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/.*",
      "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/.*"
    ],
    "omics:abortmultipartreadsetupload": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:batchdeletereadset": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:cancelrun": [
      "arn:${Partition}:omics:${Region}:${Account}:run/.*"
    ],
    "omics:cancelrunbatch": [
      "arn:${Partition}:omics:${Region}:${Account}:runBatch/.*"
    ],
    "omics:completemultipartreadsetupload": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:createannotationstoreversion": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*"
    ],
    "omics:createmultipartreadsetupload": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:createworkflowversion": [
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:deleteannotationstore": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*"
    ],
    "omics:deleteannotationstoreversions": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*"
    ],
    "omics:deletebatch": [
      "arn:${Partition}:omics:${Region}:${Account}:runBatch/.*"
    ],
    "omics:deleteconfiguration": [
      "arn:${Partition}:omics:${Region}:${Account}:configuration/.*"
    ],
    "omics:deletereference": [
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*"
    ],
    "omics:deletereferencestore": [
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*"
    ],
    "omics:deleterun": [
      "arn:${Partition}:omics:${Region}:${Account}:run/.*"
    ],
    "omics:deleterunbatch": [
      "arn:${Partition}:omics:${Region}:${Account}:run/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runBatch/.*"
    ],
    "omics:deleteruncache": [
      "arn:${Partition}:omics:${Region}:${Account}:runCache/.*"
    ],
    "omics:deleterungroup": [
      "arn:${Partition}:omics:${Region}:${Account}:runGroup/.*"
    ],
    "omics:deletes3accesspolicy": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:deletesequencestore": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:deletevariantstore": [
      "arn:${Partition}:omics:${Region}:${Account}:variantStore/.*"
    ],
    "omics:deleteworkflow": [
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:deleteworkflowversion": [
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:getannotationstore": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*"
    ],
    "omics:getannotationstoreversion": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*"
    ],
    "omics:getbatch": [
      "arn:${Partition}:omics:${Region}:${Account}:runBatch/.*"
    ],
    "omics:getconfiguration": [
      "arn:${Partition}:omics:${Region}:${Account}:configuration/.*"
    ],
    "omics:getreadset": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:getreadsetactivationjob": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:getreadsetexportjob": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:getreadsetimportjob": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:getreadsetmetadata": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:getreference": [
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*"
    ],
    "omics:getreferenceimportjob": [
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*"
    ],
    "omics:getreferencemetadata": [
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*"
    ],
    "omics:getreferencestore": [
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*"
    ],
    "omics:getrun": [
      "arn:${Partition}:omics:${Region}:${Account}:run/.*"
    ],
    "omics:getruncache": [
      "arn:${Partition}:omics:${Region}:${Account}:runCache/.*"
    ],
    "omics:getrungroup": [
      "arn:${Partition}:omics:${Region}:${Account}:runGroup/.*"
    ],
    "omics:getruntask": [
      "arn:${Partition}:omics:${Region}:${Account}:task/.*",
      "arn:${Partition}:omics:${Region}:${Account}:run/.*"
    ],
    "omics:gets3accesspolicy": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:getsequencestore": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:getvariantstore": [
      "arn:${Partition}:omics:${Region}:${Account}:variantStore/.*"
    ],
    "omics:getworkflow": [
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:getworkflowversion": [
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:listannotationstoreversions": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*"
    ],
    "omics:listmultipartreadsetuploads": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:listreadsetactivationjobs": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:listreadsetexportjobs": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:listreadsetimportjobs": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:listreadsets": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:listreadsetuploadparts": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:listreferenceimportjobs": [
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*"
    ],
    "omics:listreferences": [
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*"
    ],
    "omics:listrunsinbatch": [
      "arn:${Partition}:omics:${Region}:${Account}:runBatch/.*"
    ],
    "omics:listruntasks": [
      "arn:${Partition}:omics:${Region}:${Account}:run/.*"
    ],
    "omics:listworkflowversions": [
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:puts3accesspolicy": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:startannotationimportjob": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*"
    ],
    "omics:startreadsetactivationjob": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:startreadsetexportjob": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:startreadsetimportjob": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:startreferenceimportjob": [
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*"
    ],
    "omics:startrun": [
      "arn:${Partition}:omics:${Region}:${Account}:configuration/.*",
      "arn:${Partition}:omics:${Region}:${Account}:run/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runBatch/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runCache/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runGroup/.*",
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:startrunbatch": [
      "arn:${Partition}:omics:${Region}:${Account}:run/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runBatch/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runCache/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runGroup/.*",
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:startvariantimportjob": [
      "arn:${Partition}:omics:${Region}:${Account}:variantStore/.*"
    ],
    "omics:tagresource": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*",
      "arn:${Partition}:omics:${Region}:${Account}:variantStore/.*",
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*",
      "arn:${Partition}:omics:${Region}:${Account}:configuration/.*",
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*",
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*",
      "arn:${Partition}:omics:${Region}:${Account}:run/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runBatch/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runCache/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runGroup/.*"
    ],
    "omics:untagresource": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*",
      "arn:${Partition}:omics:${Region}:${Account}:variantStore/.*",
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*",
      "arn:${Partition}:omics:${Region}:${Account}:configuration/.*",
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*",
      "arn:${Partition}:omics:${Region}:${Account}:referenceStore/.*",
      "arn:${Partition}:omics:${Region}:${Account}:run/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runBatch/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runCache/.*",
      "arn:${Partition}:omics:${Region}:${Account}:runGroup/.*"
    ],
    "omics:updateannotationstore": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*"
    ],
    "omics:updateannotationstoreversion": [
      "arn:${Partition}:omics:${Region}:${Account}:annotationStore/.*"
    ],
    "omics:updateruncache": [
      "arn:${Partition}:omics:${Region}:${Account}:runCache/.*"
    ],
    "omics:updaterungroup": [
      "arn:${Partition}:omics:${Region}:${Account}:runGroup/.*"
    ],
    "omics:updatesequencestore": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "omics:updatevariantstore": [
      "arn:${Partition}:omics:${Region}:${Account}:variantStore/.*"
    ],
    "omics:updateworkflow": [
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:updateworkflowversion": [
      "arn:${Partition}:omics:${Region}:${Account}:workflow/.*"
    ],
    "omics:uploadreadsetpart": [
      "arn:${Partition}:omics:${Region}:${Account}:sequenceStore/.*"
    ],
    "one:createdeviceactivationqrcode": [
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*"
    ],
    "one:createdeviceinstanceconfiguration": [
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*"
    ],
    "one:deleteassociateddevice": [
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*"
    ],
    "one:deletedeviceconfigurationtemplate": [
      "arn:${Partition}:one:${Region}:${Account}:device-configuration-template/.*"
    ],
    "one:deletedeviceinstance": [
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*"
    ],
    "one:deletesite": [
      "arn:${Partition}:one:${Region}:${Account}:site/.*"
    ],
    "one:deleteuserv1": [
      "arn:${Partition}:one:${Region}:${Account}:user/.*"
    ],
    "one:getdeviceconfigurationtemplate": [
      "arn:${Partition}:one:${Region}:${Account}:device-configuration-template/.*"
    ],
    "one:getdeviceinstance": [
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*"
    ],
    "one:getdeviceinstanceconfiguration": [
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*"
    ],
    "one:getsite": [
      "arn:${Partition}:one:${Region}:${Account}:site/.*"
    ],
    "one:getsiteaddress": [
      "arn:${Partition}:one:${Region}:${Account}:site/.*"
    ],
    "one:listtagsforresource": [
      "arn:${Partition}:one:${Region}:${Account}:device-configuration-template/.*",
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*",
      "arn:${Partition}:one:${Region}:${Account}:site/.*"
    ],
    "one:rebootdevice": [
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*"
    ],
    "one:tagresource": [
      "arn:${Partition}:one:${Region}:${Account}:device-configuration-template/.*",
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*",
      "arn:${Partition}:one:${Region}:${Account}:site/.*"
    ],
    "one:untagresource": [
      "arn:${Partition}:one:${Region}:${Account}:device-configuration-template/.*",
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*",
      "arn:${Partition}:one:${Region}:${Account}:site/.*"
    ],
    "one:updatedeviceconfigurationtemplate": [
      "arn:${Partition}:one:${Region}:${Account}:device-configuration-template/.*"
    ],
    "one:updatedeviceinstance": [
      "arn:${Partition}:one:${Region}:${Account}:device-instance/.*"
    ],
    "one:updatesite": [
      "arn:${Partition}:one:${Region}:${Account}:site/.*"
    ],
    "one:updatesiteaddress": [
      "arn:${Partition}:one:${Region}:${Account}:site/.*"
    ],
    "opensearch:applicationaccessall": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "opensearch:canceldirectquery": [
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*"
    ],
    "opensearch:getdirectquery": [
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*"
    ],
    "opensearch:getdirectqueryresult": [
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*"
    ],
    "opensearch:startdirectquery": [
      "arn:${Partition}:opensearch:${Region}:${Account}:datasource/.*"
    ],
    "opensearch:viewloginpage": [
      "arn:${Partition}:opensearch:${Region}:${Account}:application/.*"
    ],
    "opsworks:assigninstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:assignvolume": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:associateelasticip": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:attachelasticloadbalancer": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:clonestack": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:createapp": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:createdeployment": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:createinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:createlayer": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:deleteapp": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:deleteinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:deletelayer": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:deletestack": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:deregisterecscluster": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:deregisterelasticip": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:deregisterinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:deregisterrdsdbinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:deregistervolume": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describeagentversions": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describeapps": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describecommands": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describedeployments": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describeecsclusters": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describeelasticips": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describeelasticloadbalancers": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describeinstances": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describelayers": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describeloadbasedautoscaling": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describepermissions": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describeraidarrays": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describerdsdbinstances": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describeserviceerrors": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describestackprovisioningparameters": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describestacks": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describestacksummary": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describetimebasedautoscaling": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:describevolumes": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:detachelasticloadbalancer": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:disassociateelasticip": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:gethostnamesuggestion": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:grantaccess": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:listtags": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:rebootinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:registerecscluster": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:registerelasticip": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:registerinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:registerrdsdbinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:registervolume": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:setloadbasedautoscaling": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:setpermission": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:settimebasedautoscaling": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:startinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:startstack": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:stopinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:stopstack": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:tagresource": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:unassigninstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:unassignvolume": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:untagresource": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:updateapp": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:updateelasticip": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:updateinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:updatelayer": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:updaterdsdbinstance": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:updatestack": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "opsworks:updatevolume": [
      "arn:${Partition}:opsworks:${Region}:${Account}:stack/.*"
    ],
    "organizations:accepthandshake": [
      "arn:${Partition}:organizations::${Account}:handshake/.*"
    ],
    "organizations:attachpolicy": [
      "arn:${Partition}:organizations::${Account}:account/.*",
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:policy/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:cancelhandshake": [
      "arn:${Partition}:organizations::${Account}:handshake/.*"
    ],
    "organizations:closeaccount": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:createorganizationalunit": [
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:createpolicy": [
      "arn:${Partition}:organizations::${Account}:policy/.*"
    ],
    "organizations:declinehandshake": [
      "arn:${Partition}:organizations::${Account}:handshake/.*"
    ],
    "organizations:deleteorganizationalunit": [
      "arn:${Partition}:organizations::${Account}:ou/.*"
    ],
    "organizations:deletepolicy": [
      "arn:${Partition}:organizations::${Account}:policy/.*"
    ],
    "organizations:deregisterdelegatedadministrator": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:describeaccount": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:describeeffectivepolicy": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:describehandshake": [
      "arn:${Partition}:organizations::${Account}:handshake/.*"
    ],
    "organizations:describeorganizationalunit": [
      "arn:${Partition}:organizations::${Account}:ou/.*"
    ],
    "organizations:describepolicy": [
      "arn:${Partition}:organizations::${Account}:policy/.*"
    ],
    "organizations:describeresponsibilitytransfer": [
      "arn:${Partition}:organizations::${Account}:transfer/.*"
    ],
    "organizations:detachpolicy": [
      "arn:${Partition}:organizations::${Account}:account/.*",
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:policy/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:disablepolicytype": [
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:enablepolicytype": [
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:inviteaccounttoorganization": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:inviteorganizationtotransferresponsibility": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:listaccountsforparent": [
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:listchildren": [
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:listdelegatedservicesforaccount": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:listeffectivepolicyvalidationerrors": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:listorganizationalunitsforparent": [
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:listparents": [
      "arn:${Partition}:organizations::${Account}:account/.*",
      "arn:${Partition}:organizations::${Account}:ou/.*"
    ],
    "organizations:listpoliciesfortarget": [
      "arn:${Partition}:organizations::${Account}:account/.*",
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:listtagsforresource": [
      "arn:${Partition}:organizations::${Account}:account/.*",
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:policy/.*",
      "arn:${Partition}:organizations::${Account}:resourcepolicy/.*",
      "arn:${Partition}:organizations::${Account}:transfer/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:listtargetsforpolicy": [
      "arn:${Partition}:organizations::${Account}:policy/.*"
    ],
    "organizations:moveaccount": [
      "arn:${Partition}:organizations::${Account}:account/.*",
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:putresourcepolicy": [
      "arn:${Partition}:organizations::${Account}:resourcepolicy/.*"
    ],
    "organizations:registerdelegatedadministrator": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:removeaccountfromorganization": [
      "arn:${Partition}:organizations::${Account}:account/.*"
    ],
    "organizations:tagresource": [
      "arn:${Partition}:organizations::${Account}:account/.*",
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:policy/.*",
      "arn:${Partition}:organizations::${Account}:resourcepolicy/.*",
      "arn:${Partition}:organizations::${Account}:transfer/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:terminateresponsibilitytransfer": [
      "arn:${Partition}:organizations::${Account}:transfer/.*"
    ],
    "organizations:untagresource": [
      "arn:${Partition}:organizations::${Account}:account/.*",
      "arn:${Partition}:organizations::${Account}:ou/.*",
      "arn:${Partition}:organizations::${Account}:policy/.*",
      "arn:${Partition}:organizations::${Account}:resourcepolicy/.*",
      "arn:${Partition}:organizations::${Account}:transfer/.*",
      "arn:${Partition}:organizations::${Account}:root/.*"
    ],
    "organizations:updateorganizationalunit": [
      "arn:${Partition}:organizations::${Account}:ou/.*"
    ],
    "organizations:updatepolicy": [
      "arn:${Partition}:organizations::${Account}:policy/.*"
    ],
    "organizations:updateresponsibilitytransfer": [
      "arn:${Partition}:organizations::${Account}:transfer/.*"
    ],
    "osis:createpipelineendpoint": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:deletepipeline": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:deletepipelineendpoint": [
      "arn:${Partition}:osis:${Region}:${Account}:endpoint/.*"
    ],
    "osis:deleteresourcepolicy": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:getpipeline": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:getpipelineblueprint": [
      "arn:${Partition}:osis:${Region}:${Account}:blueprint/.*"
    ],
    "osis:getpipelinechangeprogress": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:getresourcepolicy": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:ingest": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:listtagsforresource": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:putresourcepolicy": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:revokepipelineendpointconnections": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:startpipeline": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:stoppipeline": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:tagresource": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:untagresource": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "osis:updatepipeline": [
      "arn:${Partition}:osis:${Region}:${Account}:pipeline/.*"
    ],
    "outposts:cancelcapacitytask": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:createorder": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:createoutpost": [
      "arn:${Partition}:outposts:${Region}:${Account}:site/.*"
    ],
    "outposts:createprivateconnectivityconfig": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:createrenewal": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:deleteoutpost": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:deletesite": [
      "arn:${Partition}:outposts:${Region}:${Account}:site/.*"
    ],
    "outposts:getcapacitytask": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:getoutpost": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:getoutpostbillinginformation": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:getoutpostinstancetypes": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:getoutpostsupportedinstancetypes": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:getprivateconnectivityconfig": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:getrenewalpricing": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:getsite": [
      "arn:${Partition}:outposts:${Region}:${Account}:site/.*"
    ],
    "outposts:getsiteaddress": [
      "arn:${Partition}:outposts:${Region}:${Account}:site/.*"
    ],
    "outposts:listassetinstances": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:listassets": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:listblockinginstancesforcapacitytask": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:startcapacitytask": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:startconnection": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:tagresource": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*",
      "arn:${Partition}:outposts:${Region}:${Account}:site/.*"
    ],
    "outposts:untagresource": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*",
      "arn:${Partition}:outposts:${Region}:${Account}:site/.*"
    ],
    "outposts:updateoutpost": [
      "arn:${Partition}:outposts:${Region}:${Account}:outpost/.*"
    ],
    "outposts:updatesite": [
      "arn:${Partition}:outposts:${Region}:${Account}:site/.*"
    ],
    "outposts:updatesiteaddress": [
      "arn:${Partition}:outposts:${Region}:${Account}:site/.*"
    ],
    "outposts:updatesiterackphysicalproperties": [
      "arn:${Partition}:outposts:${Region}:${Account}:site/.*"
    ],
    "panorama:deletedevice": [
      "arn:${Partition}:panorama:${Region}:${Account}:device/.*"
    ],
    "panorama:deletepackage": [
      "arn:${Partition}:panorama:${Region}:${Account}:package/.*"
    ],
    "panorama:deregisterpackageversion": [
      "arn:${Partition}:panorama:${Region}:${Account}:package/.*"
    ],
    "panorama:describeapplicationinstance": [
      "arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/.*"
    ],
    "panorama:describeapplicationinstancedetails": [
      "arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/.*"
    ],
    "panorama:describedevice": [
      "arn:${Partition}:panorama:${Region}:${Account}:device/.*"
    ],
    "panorama:describepackage": [
      "arn:${Partition}:panorama:${Region}:${Account}:package/.*"
    ],
    "panorama:describepackageversion": [
      "arn:${Partition}:panorama:${Region}:${Account}:package/.*"
    ],
    "panorama:listapplicationinstancedependencies": [
      "arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/.*"
    ],
    "panorama:listapplicationinstancenodeinstances": [
      "arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/.*"
    ],
    "panorama:listapplicationinstances": [
      "arn:${Partition}:panorama:${Region}:${Account}:device/.*"
    ],
    "panorama:listdevicesjobs": [
      "arn:${Partition}:panorama:${Region}:${Account}:device/.*"
    ],
    "panorama:listtagsforresource": [
      "arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/.*",
      "arn:${Partition}:panorama:${Region}:${Account}:device/.*",
      "arn:${Partition}:panorama:${Region}:${Account}:package/.*"
    ],
    "panorama:registerpackageversion": [
      "arn:${Partition}:panorama:${Region}:${Account}:package/.*"
    ],
    "panorama:removeapplicationinstance": [
      "arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/.*"
    ],
    "panorama:signalapplicationinstancenodeinstances": [
      "arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/.*"
    ],
    "panorama:tagresource": [
      "arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/.*",
      "arn:${Partition}:panorama:${Region}:${Account}:device/.*",
      "arn:${Partition}:panorama:${Region}:${Account}:package/.*"
    ],
    "panorama:untagresource": [
      "arn:${Partition}:panorama:${Region}:${Account}:applicationInstance/.*",
      "arn:${Partition}:panorama:${Region}:${Account}:device/.*",
      "arn:${Partition}:panorama:${Region}:${Account}:package/.*"
    ],
    "panorama:updatedevicemetadata": [
      "arn:${Partition}:panorama:${Region}:${Account}:device/.*"
    ],
    "partnercentral:acceptchannelhandshake": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:acceptconnectioninvitation": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:acceptengagementinvitation": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:amendbenefitapplication": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:assignopportunity": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:associateawstrainingcertificationemaildomain": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:associatebenefitapplicationresource": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:associateopportunity": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:cancelbenefitapplication": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:cancelchannelhandshake": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:cancelconnection": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:cancelconnectioninvitation": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:cancelprofileupdatetask": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:createchannelhandshake": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:createengagement": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:createengagementcontext": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:createengagementinvitation": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:createmarketplacerevenueshareallocation": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:createopportunity": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:createrelationship": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:createresourcesnapshot": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:createresourcesnapshotjob": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:deleteprogrammanagementaccount": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:deleterelationship": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:deleteresourcesnapshotjob": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:disassociateawstrainingcertificationemaildomain": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:disassociatebenefitapplicationresource": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:disassociateopportunity": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getallianceleadcontact": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getawsopportunitysummary": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getbenefit": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:getbenefitallocation": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getbenefitapplication": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getconnection": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:getconnectioninvitation": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:getengagement": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:getengagementinvitation": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:getmarketplacerevenueshare": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getmarketplacerevenueshareallocation": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getopportunity": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getpartner": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getpartnerdashboard": [
      "arn:${Partition}:partnercentral::${Account}:catalog/.*"
    ],
    "partnercentral:getprofileupdatetask": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getprofilevisibility": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getprospectingfromengagementtask": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:getqualificationsassociationdetails": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getqualificationsassociationtask": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getqualificationsdisassociationtask": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getrelationship": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getresourcesnapshot": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getresourcesnapshotjob": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getrevenueattribution": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getrevenueattributionallocation": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:getrevenueattributionallocationstask": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:listbenefitallocations": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:listbenefitapplications": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:listbenefits": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:listchannelhandshakes": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:listengagementmembers": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:listengagementresourceassociations": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:listmarketplacerevenueshareallocations": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:listprogrammanagementaccounts": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:listrelationships": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:listresourcesnapshots": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:listrevenueattributionallocations": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:putallianceleadcontact": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:putprofilevisibility": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:recallbenefitapplication": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:rejectchannelhandshake": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:rejectconnectioninvitation": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:rejectengagementinvitation": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:startengagementbyacceptinginvitationtask": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:startengagementfromopportunitytask": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:startopportunityfromengagementtask": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:startprofileupdatetask": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:startprospectingfromengagementtask": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:startqualificationsassociationtask": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:startqualificationsdisassociationtask": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:startresourcesnapshotjob": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:startrevenueattributionallocationstask": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:stopresourcesnapshotjob": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:submitbenefitapplication": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:submitopportunity": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:tagresource": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:untagresource": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:updatebenefitapplication": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:updateengagementcontext": [
      "arn:${Partition}:partnercentral:${Region}::catalog/.*"
    ],
    "partnercentral:updatemarketplacerevenueshareallocation": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:updateopportunity": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:updateprogrammanagementaccount": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:updaterelationship": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "partnercentral:updaterevenueattribution": [
      "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/.*"
    ],
    "payment-cryptography:addkeyreplicationregions": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:associatempateam": [
      "arn:${Partition}:mpa:${Region}:${Account}:approval-team/.*"
    ],
    "payment-cryptography:createalias": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:decryptdata": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:deletealias": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*"
    ],
    "payment-cryptography:deletekey": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:deleteresourcepolicy": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:disassociatempateam": [
      "arn:${Partition}:mpa:${Region}:${Account}:approval-team/.*"
    ],
    "payment-cryptography:encryptdata": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:exportkey": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:generateas2805kekvalidation": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:generateauthrequestcryptogram": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:generatecardvalidationdata": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:generatemac": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:generatemacemvpinchange": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:generatepindata": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:getalias": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:getcertificatesigningrequest": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:getkey": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:getmpateamassociation": [
      "arn:${Partition}:mpa:${Region}:${Account}:approval-team/.*"
    ],
    "payment-cryptography:getpublickeycertificate": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:getresourcepolicy": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:listtagsforresource": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:putresourcepolicy": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:reencryptdata": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:removekeyreplicationregions": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:restorekey": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:startkeyusage": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:stopkeyusage": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:tagresource": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:translatekeymaterial": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:translatepindata": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:untagresource": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:updatealias": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:verifyauthrequestcryptogram": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:verifycardvalidationdata": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:verifymac": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payment-cryptography:verifypindata": [
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:alias/.*",
      "arn:${Partition}:payment-cryptography:${Region}:${Account}:key/.*"
    ],
    "payments:getpaymentinstrument": [
      "arn:${Partition}:payments::${Account}:payment-instrument:.*"
    ],
    "payments:listtagsforresource": [
      "arn:${Partition}:payments::${Account}:payment-instrument:.*"
    ],
    "payments:tagresource": [
      "arn:${Partition}:payments::${Account}:payment-instrument:.*"
    ],
    "payments:untagresource": [
      "arn:${Partition}:payments::${Account}:payment-instrument:.*"
    ],
    "pca-connector-ad:createserviceprincipalname": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:directory-registration/.*"
    ],
    "pca-connector-ad:createtemplate": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:createtemplategroupaccesscontrolentry": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:deleteconnector": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:deletedirectoryregistration": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:directory-registration/.*"
    ],
    "pca-connector-ad:deleteserviceprincipalname": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:directory-registration/.*"
    ],
    "pca-connector-ad:deletetemplate": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:deletetemplategroupaccesscontrolentry": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:getconnector": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:getdirectoryregistration": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:directory-registration/.*"
    ],
    "pca-connector-ad:getserviceprincipalname": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:directory-registration/.*"
    ],
    "pca-connector-ad:gettemplate": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:gettemplategroupaccesscontrolentry": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:listserviceprincipalnames": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:directory-registration/.*"
    ],
    "pca-connector-ad:listtemplategroupaccesscontrolentries": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:listtemplates": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:tagresource": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*",
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:directory-registration/.*"
    ],
    "pca-connector-ad:untagresource": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*",
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:directory-registration/.*"
    ],
    "pca-connector-ad:updatetemplate": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-ad:updatetemplategroupaccesscontrolentry": [
      "arn:${Partition}:pca-connector-ad:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-scep:createchallenge": [
      "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-scep:deletechallenge": [
      "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-scep:deleteconnector": [
      "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-scep:getchallengemetadata": [
      "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-scep:getchallengepassword": [
      "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-scep:getconnector": [
      "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-scep:tagresource": [
      "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/.*"
    ],
    "pca-connector-scep:untagresource": [
      "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/.*"
    ],
    "pcs:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:createcomputenodegroup": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:createqueue": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:deletecluster": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:deletecomputenodegroup": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:deletequeue": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:getcluster": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:getcomputenodegroup": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:getqueue": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:listcomputenodegroups": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:listqueues": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:registercomputenodegroupinstance": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:tagresource": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:untagresource": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:updatecluster": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:updatecomputenodegroup": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "pcs:updatequeue": [
      "arn:${Partition}:pcs:${Region}:${Account}:cluster/.*"
    ],
    "personalize:createbatchinferencejob": [
      "arn:${Partition}:personalize:${Region}:${Account}:batch-inference-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:createbatchsegmentjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:batch-segment-job/.*"
    ],
    "personalize:createcampaign": [
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:createdatadeletionjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:data-deletion-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*"
    ],
    "personalize:createdatainsightsjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:data-insights-job/.*"
    ],
    "personalize:createdataset": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*"
    ],
    "personalize:createdatasetexportjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-export-job/.*"
    ],
    "personalize:createdatasetgroup": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*"
    ],
    "personalize:createdatasetimportjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-import-job/.*"
    ],
    "personalize:createeventtracker": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:event-tracker/.*"
    ],
    "personalize:createfilter": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:filter/.*"
    ],
    "personalize:createmetricattribution": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:metric-attribution/.*"
    ],
    "personalize:createrecommender": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:recommender/.*"
    ],
    "personalize:createschema": [
      "arn:${Partition}:personalize:${Region}:${Account}:schema/.*"
    ],
    "personalize:createsolution": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:createsolutionversion": [
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:deletecampaign": [
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*"
    ],
    "personalize:deletedataset": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*"
    ],
    "personalize:deletedatasetgroup": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*"
    ],
    "personalize:deleteeventtracker": [
      "arn:${Partition}:personalize:${Region}:${Account}:event-tracker/.*"
    ],
    "personalize:deletefilter": [
      "arn:${Partition}:personalize:${Region}:${Account}:filter/.*"
    ],
    "personalize:deletemetricattribution": [
      "arn:${Partition}:personalize:${Region}:${Account}:metric-attribution/.*"
    ],
    "personalize:deleterecommender": [
      "arn:${Partition}:personalize:${Region}:${Account}:recommender/.*"
    ],
    "personalize:deleteschema": [
      "arn:${Partition}:personalize:${Region}:${Account}:schema/.*"
    ],
    "personalize:deletesolution": [
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:describealgorithm": [
      "arn:${Partition}:personalize:::algorithm/.*"
    ],
    "personalize:describebatchinferencejob": [
      "arn:${Partition}:personalize:${Region}:${Account}:batch-inference-job/.*"
    ],
    "personalize:describebatchsegmentjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:batch-segment-job/.*"
    ],
    "personalize:describecampaign": [
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*"
    ],
    "personalize:describedatadeletionjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:data-deletion-job/.*"
    ],
    "personalize:describedatainsightsjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:data-insights-job/.*"
    ],
    "personalize:describedataset": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*"
    ],
    "personalize:describedatasetexportjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-export-job/.*"
    ],
    "personalize:describedatasetgroup": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*"
    ],
    "personalize:describedatasetimportjob": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-import-job/.*"
    ],
    "personalize:describeeventtracker": [
      "arn:${Partition}:personalize:${Region}:${Account}:event-tracker/.*"
    ],
    "personalize:describefeaturetransformation": [
      "arn:${Partition}:personalize:::feature-transformation/.*"
    ],
    "personalize:describefilter": [
      "arn:${Partition}:personalize:${Region}:${Account}:filter/.*"
    ],
    "personalize:describemetricattribution": [
      "arn:${Partition}:personalize:${Region}:${Account}:metric-attribution/.*"
    ],
    "personalize:describerecipe": [
      "arn:${Partition}:personalize:::recipe/.*"
    ],
    "personalize:describerecommender": [
      "arn:${Partition}:personalize:${Region}:${Account}:recommender/.*"
    ],
    "personalize:describeschema": [
      "arn:${Partition}:personalize:${Region}:${Account}:schema/.*"
    ],
    "personalize:describesolution": [
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:describesolutionversion": [
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:getactionrecommendations": [
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*"
    ],
    "personalize:getdatainsights": [
      "arn:${Partition}:personalize:${Region}:${Account}:data-insights-job/.*"
    ],
    "personalize:getpersonalizedranking": [
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*"
    ],
    "personalize:getrecommendations": [
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*"
    ],
    "personalize:getsolutionmetrics": [
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:listtagsforresource": [
      "arn:${Partition}:personalize:${Region}:${Account}:batch-inference-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:batch-segment-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:data-deletion-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-export-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-import-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:event-tracker/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:filter/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:recommender/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:putactions": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*"
    ],
    "personalize:putitems": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*"
    ],
    "personalize:putusers": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*"
    ],
    "personalize:startrecommender": [
      "arn:${Partition}:personalize:${Region}:${Account}:recommender/.*"
    ],
    "personalize:stoprecommender": [
      "arn:${Partition}:personalize:${Region}:${Account}:recommender/.*"
    ],
    "personalize:stopsolutionversioncreation": [
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:tagresource": [
      "arn:${Partition}:personalize:${Region}:${Account}:batch-inference-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:batch-segment-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:data-deletion-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-export-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-import-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:event-tracker/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:filter/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:recommender/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:untagresource": [
      "arn:${Partition}:personalize:${Region}:${Account}:batch-inference-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:batch-segment-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:data-deletion-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-export-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-group/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:dataset-import-job/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:event-tracker/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:filter/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:recommender/.*",
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "personalize:updatecampaign": [
      "arn:${Partition}:personalize:${Region}:${Account}:campaign/.*"
    ],
    "personalize:updatedataset": [
      "arn:${Partition}:personalize:${Region}:${Account}:dataset/.*"
    ],
    "personalize:updatemetricattribution": [
      "arn:${Partition}:personalize:${Region}:${Account}:metric-attribution/.*"
    ],
    "personalize:updaterecommender": [
      "arn:${Partition}:personalize:${Region}:${Account}:recommender/.*"
    ],
    "personalize:updatesolution": [
      "arn:${Partition}:personalize:${Region}:${Account}:solution/.*"
    ],
    "pi:createperformanceanalysisreport": [
      "arn:${Partition}:pi:${Region}:${Account}:perf-reports/.*"
    ],
    "pi:deleteperformanceanalysisreport": [
      "arn:${Partition}:pi:${Region}:${Account}:perf-reports/.*"
    ],
    "pi:describedimensionkeys": [
      "arn:${Partition}:pi:${Region}:${Account}:metrics/.*"
    ],
    "pi:getdimensionkeydetails": [
      "arn:${Partition}:pi:${Region}:${Account}:metrics/.*"
    ],
    "pi:getperformanceanalysisreport": [
      "arn:${Partition}:pi:${Region}:${Account}:perf-reports/.*"
    ],
    "pi:getresourcemetadata": [
      "arn:${Partition}:pi:${Region}:${Account}:metrics/.*"
    ],
    "pi:getresourcemetrics": [
      "arn:${Partition}:pi:${Region}:${Account}:metrics/.*"
    ],
    "pi:listavailableresourcedimensions": [
      "arn:${Partition}:pi:${Region}:${Account}:metrics/.*"
    ],
    "pi:listavailableresourcemetrics": [
      "arn:${Partition}:pi:${Region}:${Account}:metrics/.*"
    ],
    "pi:listperformanceanalysisreportrecommendations": [
      "arn:${Partition}:pi:${Region}:${Account}:perf-reports/.*"
    ],
    "pi:listperformanceanalysisreports": [
      "arn:${Partition}:pi:${Region}:${Account}:perf-reports/.*"
    ],
    "pi:listtagsforresource": [
      "arn:${Partition}:pi:${Region}:${Account}:metrics/.*",
      "arn:${Partition}:pi:${Region}:${Account}:perf-reports/.*"
    ],
    "pi:tagresource": [
      "arn:${Partition}:pi:${Region}:${Account}:perf-reports/.*"
    ],
    "pi:untagresource": [
      "arn:${Partition}:pi:${Region}:${Account}:perf-reports/.*"
    ],
    "pipes:createpipe": [
      "arn:${Partition}:pipes:${Region}:${Account}:pipe/.*"
    ],
    "pipes:deletepipe": [
      "arn:${Partition}:pipes:${Region}:${Account}:pipe/.*"
    ],
    "pipes:describepipe": [
      "arn:${Partition}:pipes:${Region}:${Account}:pipe/.*"
    ],
    "pipes:listtagsforresource": [
      "arn:${Partition}:pipes:${Region}:${Account}:pipe/.*"
    ],
    "pipes:startpipe": [
      "arn:${Partition}:pipes:${Region}:${Account}:pipe/.*"
    ],
    "pipes:stoppipe": [
      "arn:${Partition}:pipes:${Region}:${Account}:pipe/.*"
    ],
    "pipes:tagresource": [
      "arn:${Partition}:pipes:${Region}:${Account}:pipe/.*"
    ],
    "pipes:untagresource": [
      "arn:${Partition}:pipes:${Region}:${Account}:pipe/.*"
    ],
    "pipes:updatepipe": [
      "arn:${Partition}:pipes:${Region}:${Account}:pipe/.*"
    ],
    "polly:deletelexicon": [
      "arn:${Partition}:polly:${Region}:${Account}:lexicon/.*"
    ],
    "polly:getlexicon": [
      "arn:${Partition}:polly:${Region}:${Account}:lexicon/.*"
    ],
    "polly:putlexicon": [
      "arn:${Partition}:polly:${Region}:${Account}:lexicon/.*"
    ],
    "polly:startspeechsynthesisstream": [
      "arn:${Partition}:polly:${Region}:${Account}:lexicon/.*"
    ],
    "polly:startspeechsynthesistask": [
      "arn:${Partition}:polly:${Region}:${Account}:lexicon/.*"
    ],
    "polly:synthesizespeech": [
      "arn:${Partition}:polly:${Region}:${Account}:lexicon/.*"
    ],
    "private-networks:acknowledgeorderreceipt": [
      "arn:${Partition}:private-networks:${Region}:${Account}:order/.*"
    ],
    "private-networks:activatedeviceidentifier": [
      "arn:${Partition}:private-networks:${Region}:${Account}:device-identifier/.*"
    ],
    "private-networks:activatenetworksite": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network-site/.*",
      "arn:${Partition}:private-networks:${Region}:${Account}:order/.*"
    ],
    "private-networks:configureaccesspoint": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network-resource/.*"
    ],
    "private-networks:createnetwork": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*"
    ],
    "private-networks:createnetworksite": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*"
    ],
    "private-networks:deactivatedeviceidentifier": [
      "arn:${Partition}:private-networks:${Region}:${Account}:device-identifier/.*"
    ],
    "private-networks:deletenetwork": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*"
    ],
    "private-networks:deletenetworksite": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network-site/.*"
    ],
    "private-networks:getdeviceidentifier": [
      "arn:${Partition}:private-networks:${Region}:${Account}:device-identifier/.*"
    ],
    "private-networks:getnetwork": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*"
    ],
    "private-networks:getnetworkresource": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network-resource/.*"
    ],
    "private-networks:getnetworksite": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network-site/.*"
    ],
    "private-networks:getorder": [
      "arn:${Partition}:private-networks:${Region}:${Account}:order/.*"
    ],
    "private-networks:listdeviceidentifiers": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*"
    ],
    "private-networks:listnetworkresources": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*"
    ],
    "private-networks:listnetworksites": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*"
    ],
    "private-networks:listorders": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*"
    ],
    "private-networks:startnetworkresourceupdate": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network-resource/.*"
    ],
    "private-networks:tagresource": [
      "arn:${Partition}:private-networks:${Region}:${Account}:device-identifier/.*",
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*",
      "arn:${Partition}:private-networks:${Region}:${Account}:network-resource/.*",
      "arn:${Partition}:private-networks:${Region}:${Account}:network-site/.*",
      "arn:${Partition}:private-networks:${Region}:${Account}:order/.*"
    ],
    "private-networks:untagresource": [
      "arn:${Partition}:private-networks:${Region}:${Account}:device-identifier/.*",
      "arn:${Partition}:private-networks:${Region}:${Account}:network/.*",
      "arn:${Partition}:private-networks:${Region}:${Account}:network-resource/.*",
      "arn:${Partition}:private-networks:${Region}:${Account}:network-site/.*",
      "arn:${Partition}:private-networks:${Region}:${Account}:order/.*"
    ],
    "private-networks:updatenetworksite": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network-site/.*"
    ],
    "private-networks:updatenetworksiteplan": [
      "arn:${Partition}:private-networks:${Region}:${Account}:network-site/.*"
    ],
    "profile:addprofilekey": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:associatestreamforsegments": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:batchgetcalculatedattributeforprofile": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:batchgetprofile": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createcalculatedattributedefinition": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createdomain": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createdomainlayout": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createeventstream": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createeventtrigger": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createintegrationworkflow": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createprofile": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createrecommender": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createrecommenderfilter": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createrecommenderschema": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createsegmentdefinition": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createsegmentestimate": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createsegmentsnapshot": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createsnapshot": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:createuploadjob": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deletecalculatedattributedefinition": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deletedomain": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deletedomainlayout": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deletedomainobjecttype": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleteeventstream": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleteeventtrigger": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleteintegration": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleteprofile": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleteprofilekey": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleteprofileobject": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleteprofileobjecttype": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleterecommender": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleterecommenderfilter": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleterecommenderschema": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deletesegmentdefinition": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deletesegmentsubscription": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:deleteworkflow": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:detectprofileobjecttype": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:disassociatestreamforsegments": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getautomergingpreview": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getcalculatedattributedefinition": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getcalculatedattributeforprofile": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getdomain": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getdomainlayout": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getdomainobjecttype": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:geteventstream": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:geteventtrigger": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getidentityresolutionjob": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getintegration": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getmatches": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getobjecttypeattributestatistics": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getprofilehistoryrecord": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getprofileinsights": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getprofileobjecttype": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getprofilerecommendations": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getrecommender": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getrecommenderfilter": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getrecommenderschema": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getsegmentdefinition": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getsegmentestimate": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getsegmentmembership": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getsegmentsnapshot": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getsegmentsubscription": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getsimilarprofiles": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getsnapshot": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getstreamforsegments": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getuploadjob": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getuploadjobpath": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getworkflow": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:getworkflowsteps": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listcalculatedattributedefinitions": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listcalculatedattributesforprofile": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listdomainlayouts": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listdomainobjects": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listdomainobjecttypes": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listeventstreams": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listeventtriggers": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listidentityresolutionjobs": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listintegrations": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listobjecttypeattributes": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listobjecttypeattributevalues": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listprofileattributevalues": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listprofilehistoryrecords": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listprofileobjects": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listprofileobjecttypes": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listrecommenderfilters": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listrecommenders": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listrecommenderschemas": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listrulebasedmatches": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listsegmentdefinitions": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listsegmentsubscriptionevents": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listtagsforresource": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listuploadjobs": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:listworkflows": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:mergeprofiles": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:putdomainobjecttype": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:putintegration": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:putprofileobject": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:putprofileobjecttype": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:putsegmentsubscription": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:searchprofiles": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:startrecommender": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:startuploadjob": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:stoprecommender": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:stopuploadjob": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:tagresource": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:untagresource": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:updatecalculatedattributedefinition": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:updatedomain": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:updatedomainlayout": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:updateeventtrigger": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:updateprofile": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "profile:updaterecommender": [
      "arn:${Partition}:profile:${Region}:${Account}:domains/.*"
    ],
    "proton:acceptenvironmentaccountconnection": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-account-connection/.*"
    ],
    "proton:cancelcomponentdeployment": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*"
    ],
    "proton:cancelenvironmentdeployment": [
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*"
    ],
    "proton:cancelserviceinstancedeployment": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:cancelservicepipelinedeployment": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:createcomponent": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*"
    ],
    "proton:createenvironment": [
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*"
    ],
    "proton:createenvironmenttemplate": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:createenvironmenttemplatemajorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:createenvironmenttemplateminorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:createenvironmenttemplateversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:createrepository": [
      "arn:${Partition}:proton:${Region}:${Account}:.*"
    ],
    "proton:createservice": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:createserviceinstance": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:createservicetemplate": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:createservicetemplatemajorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:createservicetemplateminorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:createservicetemplateversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:deletecomponent": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*"
    ],
    "proton:deletedeployment": [
      "arn:${Partition}:proton:${Region}:${Account}:deployment/.*"
    ],
    "proton:deleteenvironment": [
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*"
    ],
    "proton:deleteenvironmentaccountconnection": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-account-connection/.*"
    ],
    "proton:deleteenvironmenttemplate": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:deleteenvironmenttemplatemajorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:deleteenvironmenttemplateminorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:deleteenvironmenttemplateversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:deleterepository": [
      "arn:${Partition}:proton:${Region}:${Account}:.*"
    ],
    "proton:deleteservice": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:deleteservicetemplate": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:deleteservicetemplatemajorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:deleteservicetemplateminorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:deleteservicetemplateversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:getcomponent": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*"
    ],
    "proton:getdeployment": [
      "arn:${Partition}:proton:${Region}:${Account}:deployment/.*"
    ],
    "proton:getenvironment": [
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*"
    ],
    "proton:getenvironmentaccountconnection": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-account-connection/.*"
    ],
    "proton:getenvironmenttemplate": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:getenvironmenttemplatemajorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:getenvironmenttemplateminorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:getenvironmenttemplateversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:getrepository": [
      "arn:${Partition}:proton:${Region}:${Account}:.*"
    ],
    "proton:getservice": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:getserviceinstance": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:getservicetemplate": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:getservicetemplatemajorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:getservicetemplateminorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:getservicetemplateversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:listcomponentoutputs": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*",
      "arn:${Partition}:proton:${Region}:${Account}:deployment/.*"
    ],
    "proton:listcomponentprovisionedresources": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*"
    ],
    "proton:listcomponents": [
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*",
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:listenvironmentoutputs": [
      "arn:${Partition}:proton:${Region}:${Account}:deployment/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*"
    ],
    "proton:listenvironmentprovisionedresources": [
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*"
    ],
    "proton:listenvironmenttemplatemajorversions": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:listenvironmenttemplateminorversions": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:listenvironmenttemplateversions": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:listserviceinstanceoutputs": [
      "arn:${Partition}:proton:${Region}:${Account}:deployment/.*",
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:listserviceinstanceprovisionedresources": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:listservicepipelineoutputs": [
      "arn:${Partition}:proton:${Region}:${Account}:deployment/.*",
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:listservicepipelineprovisionedresources": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:listservicetemplatemajorversions": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:listservicetemplateminorversions": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:listservicetemplateversions": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:listtagsforresource": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment-account-connection/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*",
      "arn:${Partition}:proton:${Region}:${Account}:.*",
      "arn:${Partition}:proton:${Region}:${Account}:service/.*",
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:notifyresourcedeploymentstatuschange": [
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*",
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:rejectenvironmentaccountconnection": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-account-connection/.*"
    ],
    "proton:tagresource": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment-account-connection/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*",
      "arn:${Partition}:proton:${Region}:${Account}:.*",
      "arn:${Partition}:proton:${Region}:${Account}:service/.*",
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:untagresource": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment-account-connection/.*",
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*",
      "arn:${Partition}:proton:${Region}:${Account}:.*",
      "arn:${Partition}:proton:${Region}:${Account}:service/.*",
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:updatecomponent": [
      "arn:${Partition}:proton:${Region}:${Account}:component/.*"
    ],
    "proton:updateenvironment": [
      "arn:${Partition}:proton:${Region}:${Account}:environment/.*"
    ],
    "proton:updateenvironmentaccountconnection": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-account-connection/.*"
    ],
    "proton:updateenvironmenttemplate": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:updateenvironmenttemplatemajorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:updateenvironmenttemplateminorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:updateenvironmenttemplateversion": [
      "arn:${Partition}:proton:${Region}:${Account}:environment-template/.*"
    ],
    "proton:updateservice": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:updateserviceinstance": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:updateservicepipeline": [
      "arn:${Partition}:proton:${Region}:${Account}:service/.*"
    ],
    "proton:updateservicetemplate": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:updateservicetemplatemajorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:updateservicetemplateminorversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "proton:updateservicetemplateversion": [
      "arn:${Partition}:proton:${Region}:${Account}:service-template/.*"
    ],
    "purchase-orders:addpurchaseorder": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:deletepurchaseorder": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:getpurchaseorder": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:listpurchaseorderinvoices": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:listtagsforresource": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:modifypurchaseorders": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:tagresource": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:untagresource": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:updatepurchaseorder": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:updatepurchaseorderstatus": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "purchase-orders:viewpurchaseorders": [
      "arn:${Partition}:purchase-orders::${Account}:purchase-order/.*"
    ],
    "q:associatelogindomain": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:batchdescribegroups": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:batchdescribeusers": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:batchgetgroups": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:batchgetusers": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:createassignment": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:createplugin": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/.*"
    ],
    "q:createscimaccesstoken": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:deleteassignment": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:deleteplugin": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/.*"
    ],
    "q:deletescimaccesstoken": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:disassociatelogindomain": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:getplugin": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/.*"
    ],
    "q:listgroups": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:listlogindomains": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:listplugins": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/.*"
    ],
    "q:listscimaccesstokens": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:listtagsforresource": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/.*"
    ],
    "q:listusers": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:tagresource": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/.*",
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:untagresource": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/.*",
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:updateassignment": [
      "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/.*"
    ],
    "q:updateplugin": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/.*"
    ],
    "q:useplugin": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:plugin/.*"
    ],
    "qapps:associatelibraryitemreview": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:associateqappwithuser": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:batchcreatecategory": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:batchdeletecategory": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:batchupdatecategory": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:copyqapp": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:createlibraryitem": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:createlibraryitemreview": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:createqapp": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:createsubscriptiontoken": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:deletelibraryitem": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:deleteqapp": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:describeqapppermissions": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:disassociatelibraryitemreview": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:disassociateqappfromuser": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:exportqappsessiondata": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:getlibraryitem": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:getqapp": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:getqappsession": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:getqappsessionmetadata": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:importdocument": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:listcategories": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:listlibraryitems": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:listqapps": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:listqappsessiondata": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:listtagsforresource": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:predictproblemstatementfromconversation": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:predictqapp": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:predictqappfromproblemstatement": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qapps:startqappsession": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:stopqappsession": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:tagresource": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:untagresource": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:updatelibraryitem": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:updatelibraryitemmetadata": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:updateqapp": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:updateqapppermissions": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*",
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:updateqappsession": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qapps:updateqappsessionmetadata": [
      "arn:${Partition}:qapps:${Region}:${Account}:application/.*"
    ],
    "qbusiness:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:associatepermission": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:batchdeletedocument": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:batchputdocument": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:cancelsubscription": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:chat": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:chatsync": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:checkdocumentaccess": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createanonymouswebexperienceurl": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createchatresponseconfiguration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createdataaccessor": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createdataaccessorwithtti": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createdatasource": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createindex": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createintegration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createplugin": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createretriever": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createsubscription": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createuser": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:createwebexperience": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deleteapplication": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deleteattachment": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deletechatcontrolsconfiguration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deletechatresponseconfiguration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deleteconversation": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deletedataaccessor": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deletedatasource": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deletegroup": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deleteindex": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deleteintegration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deleteplugin": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deleteretriever": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deleteuser": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:deletewebexperience": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:disableaclondatasource": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:disassociatepermission": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getapplication": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getchatcontrolsconfiguration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getchatresponseconfiguration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getdataaccessor": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getdatasource": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getdocumentcontent": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getgroup": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getindex": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getintegration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getmedia": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getplugin": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getpolicy": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getretriever": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getuser": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:getwebexperience": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listattachments": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listchatresponseconfigurations": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listconversations": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listdataaccessors": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listdatasources": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listdatasourcesyncjobs": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listdocuments": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listgroups": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listindices": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listintegrations": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listmessages": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listpluginactions": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listplugins": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listretrievers": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listsubscriptions": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listtagsforresource": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:listwebexperiences": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:putfeedback": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:putgroup": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:putresourcepolicy": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:searchrelevantcontent": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:startdatasourcesyncjob": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:startdeployment": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:stopdatasourcesyncjob": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:tagresource": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:untagresource": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updateapplication": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updatechatcontrolsconfiguration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updatechatresponseconfiguration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updatedataaccessor": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updatedatasource": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updateindex": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updateintegration": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updateplugin": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updateretriever": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updatesubscription": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updateuser": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qbusiness:updatewebexperience": [
      "arn:${Partition}:qbusiness:${Region}:${Account}:application/.*"
    ],
    "qdeveloper:exportartifact": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:codeTransformation/.*"
    ],
    "qdeveloper:importartifact": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:codeTransformation/.*"
    ],
    "qdeveloper:listtagsforresource": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:codeTransformation/.*"
    ],
    "qdeveloper:tagresource": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:codeTransformation/.*"
    ],
    "qdeveloper:transformcode": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:codeTransformation/.*"
    ],
    "qdeveloper:untagresource": [
      "arn:${Partition}:qdeveloper:${Region}:${Account}:codeTransformation/.*"
    ],
    "qldb:canceljournalkinesisstream": [
      "arn:${Partition}:qldb:${Region}:${Account}:stream/.*"
    ],
    "qldb:createledger": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:deleteledger": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:describejournalkinesisstream": [
      "arn:${Partition}:qldb:${Region}:${Account}:stream/.*"
    ],
    "qldb:describejournals3export": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:describeledger": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:executestatement": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:exportjournaltos3": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:getblock": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:getdigest": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:getrevision": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:insertsampledata": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:listjournalkinesisstreamsforledger": [
      "arn:${Partition}:qldb:${Region}:${Account}:stream/.*"
    ],
    "qldb:listjournals3exportsforledger": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:listtagsforresource": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*",
      "arn:${Partition}:qldb:${Region}:${Account}:stream/.*"
    ],
    "qldb:partiqlcreateindex": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqlcreatetable": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqldelete": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqldropindex": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqldroptable": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqlhistoryfunction": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqlinsert": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqlredact": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqlselect": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqlundroptable": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:partiqlupdate": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:sendcommand": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:showcatalog": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:streamjournaltokinesis": [
      "arn:${Partition}:qldb:${Region}:${Account}:stream/.*"
    ],
    "qldb:tagresource": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*",
      "arn:${Partition}:qldb:${Region}:${Account}:stream/.*"
    ],
    "qldb:untagresource": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*",
      "arn:${Partition}:qldb:${Region}:${Account}:stream/.*"
    ],
    "qldb:updateledger": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "qldb:updateledgerpermissionsmode": [
      "arn:${Partition}:qldb:${Region}:${Account}:ledger/.*"
    ],
    "quicksight:batchcreatetopicreviewedanswer": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:batchdeleteknowledgebase": [
      "arn:${Partition}:quicksight:${Region}:${Account}:knowledge-base/.*"
    ],
    "quicksight:batchdeletetopicreviewedanswer": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:batchdescribeuserlimits": [
      "arn:${Partition}:quicksight:${Region}:${Account}:limits-profile/.*"
    ],
    "quicksight:cancelingestion": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:createactionconnector": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*"
    ],
    "quicksight:createadmin": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:createagent": [
      "arn:${Partition}:quicksight:${Region}:${Account}:agent/.*"
    ],
    "quicksight:createanalysis": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*"
    ],
    "quicksight:createapprovalpolicy": [
      "arn:${Partition}:quicksight:${Region}:${Account}:approval-policy/.*"
    ],
    "quicksight:createbrand": [
      "arn:${Partition}:quicksight:${Region}:${Account}:brand/.*"
    ],
    "quicksight:createcustompermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/.*"
    ],
    "quicksight:createdashboard": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:createdataset": [
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*"
    ],
    "quicksight:createdlpsetting": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*"
    ],
    "quicksight:createemailcustomizationtemplate": [
      "arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/.*"
    ],
    "quicksight:createextension": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension/.*"
    ],
    "quicksight:createextensionaccess": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension-access/.*"
    ],
    "quicksight:createflow": [
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*"
    ],
    "quicksight:createfolder": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:createfoldermembership": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:creategroup": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:creategroupmembership": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:createiampolicyassignment": [
      "arn:${Partition}:quicksight::${Account}:assignment/.*"
    ],
    "quicksight:createingestion": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:createknowledgebase": [
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:knowledge-base/.*"
    ],
    "quicksight:createlimitsprofile": [
      "arn:${Partition}:quicksight:${Region}:${Account}:limits-profile/.*"
    ],
    "quicksight:createnamespace": [
      "arn:${Partition}:quicksight:${Region}:${Account}:namespace/.*"
    ],
    "quicksight:createreader": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:createrefreshschedule": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:createspace": [
      "arn:${Partition}:quicksight:${Region}:${Account}:space/.*"
    ],
    "quicksight:createtemplate": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:createtemplatealias": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:createtheme": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:createthemealias": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:createtopic": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:createtopicrefreshschedule": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:createuser": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:deleteaccountcustomization": [
      "arn:${Partition}:quicksight:${Region}:${Account}:customization/.*"
    ],
    "quicksight:deleteaccountsubscription": [
      "arn:${Partition}:quicksight:${Region}:${Account}:account/.*"
    ],
    "quicksight:deleteactionconnector": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*"
    ],
    "quicksight:deleteagent": [
      "arn:${Partition}:quicksight:${Region}:${Account}:agent/.*"
    ],
    "quicksight:deleteanalysis": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*"
    ],
    "quicksight:deleteapp": [
      "arn:${Partition}:quicksight:${Region}:${Account}:app/.*"
    ],
    "quicksight:deleteapprovalpolicy": [
      "arn:${Partition}:quicksight:${Region}:${Account}:approval-policy/.*"
    ],
    "quicksight:deletebrand": [
      "arn:${Partition}:quicksight:${Region}:${Account}:brand/.*"
    ],
    "quicksight:deletedashboard": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:deletedataset": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:deletedatasetrefreshproperties": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:deletedatasource": [
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*"
    ],
    "quicksight:deletedlpsetting": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*"
    ],
    "quicksight:deleteemailcustomizationtemplate": [
      "arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/.*"
    ],
    "quicksight:deleteextension": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension/.*"
    ],
    "quicksight:deleteextensionaccess": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension-access/.*"
    ],
    "quicksight:deleteflow": [
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*"
    ],
    "quicksight:deletefolder": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:deletefoldermembership": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:deletegroup": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:deletegroupmembership": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:deleteiampolicyassignment": [
      "arn:${Partition}:quicksight::${Account}:assignment/.*"
    ],
    "quicksight:deleteknowledgebase": [
      "arn:${Partition}:quicksight:${Region}:${Account}:knowledge-base/.*"
    ],
    "quicksight:deletelimitsprofile": [
      "arn:${Partition}:quicksight:${Region}:${Account}:limits-profile/.*"
    ],
    "quicksight:deletenamespace": [
      "arn:${Partition}:quicksight:${Region}:${Account}:namespace/.*"
    ],
    "quicksight:deleteoauthclientapplication": [
      "arn:${Partition}:quicksight:${Region}:${Account}:oauthClientApplication/.*"
    ],
    "quicksight:deleterefreshschedule": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:deletespace": [
      "arn:${Partition}:quicksight:${Region}:${Account}:space/.*"
    ],
    "quicksight:deletetemplate": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:deletetemplatealias": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:deletetheme": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:deletethemealias": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:deletetopic": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:deletetopicrefreshschedule": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:deleteuser": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:deleteuserbyprincipalid": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:deleteusercustompermission": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:deletevpcconnection": [
      "arn:${Partition}:quicksight:${Region}:${Account}:vpcConnection/.*"
    ],
    "quicksight:describeaccountcustomization": [
      "arn:${Partition}:quicksight:${Region}:${Account}:customization/.*"
    ],
    "quicksight:describeaccountsubscription": [
      "arn:${Partition}:quicksight:${Region}:${Account}:account/.*"
    ],
    "quicksight:describeactionconnector": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*"
    ],
    "quicksight:describeactionconnectorpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*"
    ],
    "quicksight:describeagent": [
      "arn:${Partition}:quicksight:${Region}:${Account}:agent/.*"
    ],
    "quicksight:describeagentpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:agent/.*"
    ],
    "quicksight:describeanalysis": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*"
    ],
    "quicksight:describeanalysispermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*"
    ],
    "quicksight:describeapp": [
      "arn:${Partition}:quicksight:${Region}:${Account}:app/.*"
    ],
    "quicksight:describeapppermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:app/.*"
    ],
    "quicksight:describeapprovalpolicy": [
      "arn:${Partition}:quicksight:${Region}:${Account}:approval-policy/.*"
    ],
    "quicksight:describeassetbundleexportjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-export-job/.*"
    ],
    "quicksight:describeassetbundleimportjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-import-job/.*"
    ],
    "quicksight:describeautomationjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:automation-group/.*"
    ],
    "quicksight:describebrand": [
      "arn:${Partition}:quicksight:${Region}:${Account}:brand/.*"
    ],
    "quicksight:describebrandpublishedversion": [
      "arn:${Partition}:quicksight:${Region}:${Account}:brand/.*"
    ],
    "quicksight:describecustompermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/.*"
    ],
    "quicksight:describedashboard": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:describedashboardpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:describedashboardsnapshotjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:describedashboardsnapshotjobresult": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:describedataset": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:describedatasetpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:describedatasetrefreshproperties": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:describedatasource": [
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*"
    ],
    "quicksight:describedatasourcepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*"
    ],
    "quicksight:describedlpjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*"
    ],
    "quicksight:describedlpsetting": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*"
    ],
    "quicksight:describeemailcustomizationtemplate": [
      "arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/.*"
    ],
    "quicksight:describeextension": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension/.*"
    ],
    "quicksight:describeextensionaccess": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension-access/.*"
    ],
    "quicksight:describeextensionpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension/.*"
    ],
    "quicksight:describeflow": [
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*"
    ],
    "quicksight:describefolder": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:describefolderpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:describefolderresolvedpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:describegroup": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:describegroupmembership": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:describeiampolicyassignment": [
      "arn:${Partition}:quicksight::${Account}:assignment/.*"
    ],
    "quicksight:describeingestion": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:describeknowledgebase": [
      "arn:${Partition}:quicksight:${Region}:${Account}:knowledge-base/.*"
    ],
    "quicksight:describeknowledgebasepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:knowledge-base/.*"
    ],
    "quicksight:describelimitsprofile": [
      "arn:${Partition}:quicksight:${Region}:${Account}:limits-profile/.*"
    ],
    "quicksight:describenamespace": [
      "arn:${Partition}:quicksight:${Region}:${Account}:namespace/.*"
    ],
    "quicksight:describeoauthclientapplication": [
      "arn:${Partition}:quicksight:${Region}:${Account}:oauthClientApplication/.*"
    ],
    "quicksight:describerefreshschedule": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:describespace": [
      "arn:${Partition}:quicksight:${Region}:${Account}:space/.*"
    ],
    "quicksight:describespacepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:space/.*"
    ],
    "quicksight:describetemplate": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:describetemplatealias": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:describetemplatepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:describetheme": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:describethemealias": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:describethemepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:describetopic": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:describetopicpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:describetopicrefresh": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:describetopicrefreshschedule": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:describeuser": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:describevpcconnection": [
      "arn:${Partition}:quicksight:${Region}:${Account}:vpcConnection/.*"
    ],
    "quicksight:generateembedurlforanonymoususer": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:generateembedurlforregistereduser": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:getauthcode": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:getdashboardembedurl": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:getflowmetadata": [
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*"
    ],
    "quicksight:getflowpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*"
    ],
    "quicksight:getidentitycontext": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:listagents": [
      "arn:${Partition}:quicksight:${Region}:${Account}:agent/.*"
    ],
    "quicksight:listanalyses": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*"
    ],
    "quicksight:listapprovalpolicies": [
      "arn:${Partition}:quicksight:${Region}:${Account}:approval-policy/.*"
    ],
    "quicksight:listapps": [
      "arn:${Partition}:quicksight:${Region}:${Account}:app/.*"
    ],
    "quicksight:listassetbundleexportjobs": [
      "arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-export-job/.*"
    ],
    "quicksight:listassetbundleimportjobs": [
      "arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-import-job/.*"
    ],
    "quicksight:listdashboards": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:listdashboardversions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:listdlpsettings": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*"
    ],
    "quicksight:listfoldermembers": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:listfolders": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:listfoldersforresource": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:listgroupmemberships": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:listgroups": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:listiampolicyassignments": [
      "arn:${Partition}:quicksight::${Account}:assignment/.*"
    ],
    "quicksight:listiampolicyassignmentsforuser": [
      "arn:${Partition}:quicksight::${Account}:assignment/.*"
    ],
    "quicksight:listlimitsprofiles": [
      "arn:${Partition}:quicksight:${Region}:${Account}:limits-profile/.*"
    ],
    "quicksight:listselfupgrades": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:listspaceresources": [
      "arn:${Partition}:quicksight:${Region}:${Account}:space/.*"
    ],
    "quicksight:listtagsforresource": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:app/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:brand/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:customization/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:oauthClientApplication/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:vpcConnection/.*"
    ],
    "quicksight:listtemplatealiases": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:listtemplates": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:listtemplateversions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:listthemealiases": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:listthemes": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:listthemeversions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:listusergroups": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:listusers": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:passdataset": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:passdatasource": [
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*"
    ],
    "quicksight:passtopic": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:predictqaresults": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:putdatasetrefreshproperties": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:registeruser": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:restoreanalysis": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*"
    ],
    "quicksight:searchactionconnectors": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*"
    ],
    "quicksight:searchagents": [
      "arn:${Partition}:quicksight:${Region}:${Account}:agent/.*"
    ],
    "quicksight:searchanalyses": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*"
    ],
    "quicksight:searchapps": [
      "arn:${Partition}:quicksight:${Region}:${Account}:app/.*"
    ],
    "quicksight:searchdashboards": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:searchdatasets": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:searchdatasources": [
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*"
    ],
    "quicksight:searchfolders": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:searchgroups": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:searchknowledgebases": [
      "arn:${Partition}:quicksight:${Region}:${Account}:knowledge-base/.*"
    ],
    "quicksight:searchtopics": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:searchusers": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:startassetbundleexportjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-export-job/.*"
    ],
    "quicksight:startassetbundleimportjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:asset-bundle-import-job/.*"
    ],
    "quicksight:startautomationjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:automation-group/.*"
    ],
    "quicksight:startdashboardsnapshotjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:startdlpjob": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*"
    ],
    "quicksight:startextensioninstallation": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension/.*"
    ],
    "quicksight:tagresource": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:app/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:brand/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:customization/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:oauthClientApplication/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:vpcConnection/.*"
    ],
    "quicksight:unpublishflow": [
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*"
    ],
    "quicksight:untagresource": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:app/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:brand/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:customization/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:oauthClientApplication/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:vpcConnection/.*"
    ],
    "quicksight:updateaccountcustomization": [
      "arn:${Partition}:quicksight:${Region}:${Account}:customization/.*"
    ],
    "quicksight:updateactionconnector": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*"
    ],
    "quicksight:updateactionconnectorpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/.*"
    ],
    "quicksight:updateagent": [
      "arn:${Partition}:quicksight:${Region}:${Account}:agent/.*"
    ],
    "quicksight:updateagentpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:agent/.*"
    ],
    "quicksight:updateanalysis": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*"
    ],
    "quicksight:updateanalysispermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:analysis/.*"
    ],
    "quicksight:updateapppermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:app/.*"
    ],
    "quicksight:updateapprovalpolicy": [
      "arn:${Partition}:quicksight:${Region}:${Account}:approval-policy/.*"
    ],
    "quicksight:updatebrand": [
      "arn:${Partition}:quicksight:${Region}:${Account}:brand/.*"
    ],
    "quicksight:updatebrandpublishedversion": [
      "arn:${Partition}:quicksight:${Region}:${Account}:brand/.*"
    ],
    "quicksight:updatecustompermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/.*"
    ],
    "quicksight:updatedashboard": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:updatedashboardlinks": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:updatedashboardpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:updatedashboardpublishedversion": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dashboard/.*"
    ],
    "quicksight:updatedataset": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*"
    ],
    "quicksight:updatedatasetpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:updatedatasource": [
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*"
    ],
    "quicksight:updatedatasourcepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:datasource/.*"
    ],
    "quicksight:updatedlpsetting": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dlpsetting/.*"
    ],
    "quicksight:updateemailcustomizationtemplate": [
      "arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/.*"
    ],
    "quicksight:updateextension": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension/.*"
    ],
    "quicksight:updateextensionaccess": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension-access/.*"
    ],
    "quicksight:updateextensionpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:extension/.*"
    ],
    "quicksight:updateflow": [
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*"
    ],
    "quicksight:updateflowpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:flow/.*"
    ],
    "quicksight:updatefolder": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:updatefolderpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:folder/.*"
    ],
    "quicksight:updategroup": [
      "arn:${Partition}:quicksight:${Region}:${Account}:group/.*"
    ],
    "quicksight:updateiampolicyassignment": [
      "arn:${Partition}:quicksight::${Account}:assignment/.*"
    ],
    "quicksight:updateknowledgebase": [
      "arn:${Partition}:quicksight:${Region}:${Account}:knowledge-base/.*"
    ],
    "quicksight:updateknowledgebasepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:knowledge-base/.*"
    ],
    "quicksight:updatelimitsprofile": [
      "arn:${Partition}:quicksight:${Region}:${Account}:limits-profile/.*"
    ],
    "quicksight:updateoauthclientapplication": [
      "arn:${Partition}:quicksight:${Region}:${Account}:oauthClientApplication/.*"
    ],
    "quicksight:updaterefreshschedule": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*"
    ],
    "quicksight:updateselfupgrade": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:updatespace": [
      "arn:${Partition}:quicksight:${Region}:${Account}:space/.*"
    ],
    "quicksight:updatespacepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:space/.*"
    ],
    "quicksight:updatespaceresources": [
      "arn:${Partition}:quicksight:${Region}:${Account}:space/.*"
    ],
    "quicksight:updatetemplate": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:updatetemplatealias": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:updatetemplatepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:template/.*"
    ],
    "quicksight:updatetheme": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:updatethemealias": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:updatethemepermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:theme/.*"
    ],
    "quicksight:updatetopic": [
      "arn:${Partition}:quicksight:${Region}:${Account}:dataset/.*",
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:updatetopicpermissions": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:updatetopicrefreshschedule": [
      "arn:${Partition}:quicksight:${Region}:${Account}:topic/.*"
    ],
    "quicksight:updateuser": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:updateusercustompermission": [
      "arn:${Partition}:quicksight:${Region}:${Account}:user/.*"
    ],
    "quicksight:updatevpcconnection": [
      "arn:${Partition}:quicksight:${Region}:${Account}:vpcConnection/.*"
    ],
    "ram:acceptresourceshareinvitation": [
      "arn:${Partition}:ram:${Region}:${Account}:resource-share-invitation/.*"
    ],
    "ram:associateresourceshare": [
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "ram:associateresourcesharepermission": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*",
      "arn:${Partition}:ram::${Account}:permission/.*",
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "ram:createpermissionversion": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*"
    ],
    "ram:deletepermission": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*"
    ],
    "ram:deletepermissionversion": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*"
    ],
    "ram:deleteresourceshare": [
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "ram:disassociateresourceshare": [
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "ram:disassociateresourcesharepermission": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*",
      "arn:${Partition}:ram::${Account}:permission/.*",
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "ram:getpermission": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*",
      "arn:${Partition}:ram::${Account}:permission/.*"
    ],
    "ram:listpendinginvitationresources": [
      "arn:${Partition}:ram:${Region}:${Account}:resource-share-invitation/.*"
    ],
    "ram:listpermissionassociations": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*",
      "arn:${Partition}:ram::${Account}:permission/.*"
    ],
    "ram:listresourcesharepermissions": [
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "ram:promotepermissioncreatedfrompolicy": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*"
    ],
    "ram:promoteresourcesharecreatedfrompolicy": [
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "ram:rejectresourceshareinvitation": [
      "arn:${Partition}:ram:${Region}:${Account}:resource-share-invitation/.*"
    ],
    "ram:replacepermissionassociations": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*",
      "arn:${Partition}:ram::${Account}:permission/.*"
    ],
    "ram:setdefaultpermissionversion": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*"
    ],
    "ram:tagresource": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*",
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "ram:untagresource": [
      "arn:${Partition}:ram:${Region}:${Account}:permission/.*",
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "ram:updateresourceshare": [
      "arn:${Partition}:ram:${Region}:${Account}:resource-share/.*"
    ],
    "rbin:createrule": [
      "arn:${Partition}:rbin:${Region}:${Account}:rule/.*"
    ],
    "rbin:deleterule": [
      "arn:${Partition}:rbin:${Region}:${Account}:rule/.*"
    ],
    "rbin:getrule": [
      "arn:${Partition}:rbin:${Region}:${Account}:rule/.*"
    ],
    "rbin:listtagsforresource": [
      "arn:${Partition}:rbin:${Region}:${Account}:rule/.*"
    ],
    "rbin:lockrule": [
      "arn:${Partition}:rbin:${Region}:${Account}:rule/.*"
    ],
    "rbin:tagresource": [
      "arn:${Partition}:rbin:${Region}:${Account}:rule/.*"
    ],
    "rbin:unlockrule": [
      "arn:${Partition}:rbin:${Region}:${Account}:rule/.*"
    ],
    "rbin:untagresource": [
      "arn:${Partition}:rbin:${Region}:${Account}:rule/.*"
    ],
    "rbin:updaterule": [
      "arn:${Partition}:rbin:${Region}:${Account}:rule/.*"
    ],
    "rds-data:batchexecutestatement": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds-data:begintransaction": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds-data:committransaction": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds-data:executesql": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds-data:executestatement": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds-data:rollbacktransaction": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds-db:connect": [
      "arn:${Partition}:rds-db:${Region}:${Account}:dbuser:.*"
    ],
    "rds:addroletodbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:addroletodbinstance": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:addsourceidentifiertosubscription": [
      "arn:${Partition}:rds:${Region}:${Account}:es:.*"
    ],
    "rds:addtagstoresource": [
      "arn:${Partition}:rds:${Region}:${Account}:auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cev:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-endpoint:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:deployment:.*",
      "arn:${Partition}:rds:${Region}:${Account}:es:.*",
      "arn:${Partition}:rds::${Account}:global-cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:integration:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy-endpoint:.*",
      "arn:${Partition}:rds:${Region}:${Account}:ri:.*",
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*",
      "arn:${Partition}:rds:${Region}:${Account}:shard-group:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot-tenant-database:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*",
      "arn:${Partition}:rds:${Region}:${Account}:target-group:.*",
      "arn:${Partition}:rds:${Region}:${Account}:tenant-database:.*"
    ],
    "rds:applypendingmaintenanceaction": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:authorizedbsecuritygroupingress": [
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*"
    ],
    "rds:backtrackdbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:copycustomdbengineversion": [
      "arn:${Partition}:rds:${Region}:${Account}:cev:.*"
    ],
    "rds:copydbclusterparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*"
    ],
    "rds:copydbclustersnapshot": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*"
    ],
    "rds:copydbparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*"
    ],
    "rds:copydbsnapshot": [
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:copyoptiongroup": [
      "arn:${Partition}:rds:${Region}:${Account}:og:.*"
    ],
    "rds:createbluegreendeployment": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:deployment:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*"
    ],
    "rds:createcustomdbengineversion": [
      "arn:${Partition}:rds:${Region}:${Account}:cev:.*"
    ],
    "rds:createdbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds::${Account}:global-cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:createdbclusterendpoint": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-endpoint:.*"
    ],
    "rds:createdbclusterparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*"
    ],
    "rds:createdbclustersnapshot": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*"
    ],
    "rds:createdbinstance": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:createdbinstancereadreplica": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:createdbparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*"
    ],
    "rds:createdbproxyendpoint": [
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy-endpoint:.*"
    ],
    "rds:createdbsecuritygroup": [
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*"
    ],
    "rds:createdbshardgroup": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:shard-group:.*"
    ],
    "rds:createdbsnapshot": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:createdbsubnetgroup": [
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:createeventsubscription": [
      "arn:${Partition}:rds:${Region}:${Account}:es:.*"
    ],
    "rds:createglobalcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds::${Account}:global-cluster:.*"
    ],
    "rds:createintegration": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:integration:.*"
    ],
    "rds:createoptiongroup": [
      "arn:${Partition}:rds:${Region}:${Account}:og:.*"
    ],
    "rds:createtenantdatabase": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:tenant-database:.*"
    ],
    "rds:crossregioncommunication": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:deletebluegreendeployment": [
      "arn:${Partition}:rds:${Region}:${Account}:deployment:.*"
    ],
    "rds:deletecustomdbengineversion": [
      "arn:${Partition}:rds:${Region}:${Account}:cev:.*"
    ],
    "rds:deletedbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*"
    ],
    "rds:deletedbclusterautomatedbackup": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:.*"
    ],
    "rds:deletedbclusterendpoint": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-endpoint:.*"
    ],
    "rds:deletedbclusterparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*"
    ],
    "rds:deletedbclustersnapshot": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*"
    ],
    "rds:deletedbinstance": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:deletedbinstanceautomatedbackup": [
      "arn:${Partition}:rds:${Region}:${Account}:auto-backup:.*"
    ],
    "rds:deletedbparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*"
    ],
    "rds:deletedbproxy": [
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*"
    ],
    "rds:deletedbproxyendpoint": [
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy-endpoint:.*"
    ],
    "rds:deletedbsecuritygroup": [
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*"
    ],
    "rds:deletedbshardgroup": [
      "arn:${Partition}:rds:${Region}:${Account}:shard-group:.*"
    ],
    "rds:deletedbsnapshot": [
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:deletedbsubnetgroup": [
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:deleteeventsubscription": [
      "arn:${Partition}:rds:${Region}:${Account}:es:.*"
    ],
    "rds:deleteglobalcluster": [
      "arn:${Partition}:rds::${Account}:global-cluster:.*"
    ],
    "rds:deleteintegration": [
      "arn:${Partition}:rds:${Region}:${Account}:integration:.*"
    ],
    "rds:deleteoptiongroup": [
      "arn:${Partition}:rds:${Region}:${Account}:og:.*"
    ],
    "rds:deletetenantdatabase": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:tenant-database:.*"
    ],
    "rds:deregisterdbproxytargets": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*",
      "arn:${Partition}:rds:${Region}:${Account}:target-group:.*"
    ],
    "rds:describebluegreendeployments": [
      "arn:${Partition}:rds:${Region}:${Account}:deployment:.*"
    ],
    "rds:describedbclusterautomatedbackups": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:.*"
    ],
    "rds:describedbclusterbacktracks": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:describedbclusterendpoints": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-endpoint:.*"
    ],
    "rds:describedbclusterparametergroups": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*"
    ],
    "rds:describedbclusterparameters": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*"
    ],
    "rds:describedbclusters": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:describedbclustersnapshotattributes": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*"
    ],
    "rds:describedbclustersnapshots": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*"
    ],
    "rds:describedbinstanceautomatedbackups": [
      "arn:${Partition}:rds:${Region}:${Account}:auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:describedbinstances": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:describedblogfiles": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:describedbparametergroups": [
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*"
    ],
    "rds:describedbparameters": [
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*"
    ],
    "rds:describedbproxies": [
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*"
    ],
    "rds:describedbproxyendpoints": [
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy-endpoint:.*"
    ],
    "rds:describedbproxytargetgroups": [
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*"
    ],
    "rds:describedbproxytargets": [
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*",
      "arn:${Partition}:rds:${Region}:${Account}:target-group:.*"
    ],
    "rds:describedbsecuritygroups": [
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*"
    ],
    "rds:describedbshardgroups": [
      "arn:${Partition}:rds:${Region}:${Account}:shard-group:.*"
    ],
    "rds:describedbsnapshotattributes": [
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:describedbsnapshots": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:describedbsnapshottenantdatabases": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot-tenant-database:.*"
    ],
    "rds:describedbsubnetgroups": [
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:describeeventsubscriptions": [
      "arn:${Partition}:rds:${Region}:${Account}:es:.*"
    ],
    "rds:describeexporttasks": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:describeglobalclusters": [
      "arn:${Partition}:rds::${Account}:global-cluster:.*"
    ],
    "rds:describeintegrations": [
      "arn:${Partition}:rds:${Region}:${Account}:integration:.*"
    ],
    "rds:describeoptiongroups": [
      "arn:${Partition}:rds:${Region}:${Account}:og:.*"
    ],
    "rds:describependingmaintenanceactions": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:describereserveddbinstances": [
      "arn:${Partition}:rds:${Region}:${Account}:ri:.*"
    ],
    "rds:describetenantdatabases": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:tenant-database:.*"
    ],
    "rds:describevaliddbinstancemodifications": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:disablehttpendpoint": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:downloadcompletedblogfile": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:downloaddblogfileportion": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:enablehttpendpoint": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:failoverdbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:failoverglobalcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds::${Account}:global-cluster:.*"
    ],
    "rds:listtagsforresource": [
      "arn:${Partition}:rds:${Region}:${Account}:auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cev:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-endpoint:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:es:.*",
      "arn:${Partition}:rds::${Account}:global-cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:integration:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy-endpoint:.*",
      "arn:${Partition}:rds:${Region}:${Account}:ri:.*",
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*",
      "arn:${Partition}:rds:${Region}:${Account}:shard-group:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot-tenant-database:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*",
      "arn:${Partition}:rds:${Region}:${Account}:target-group:.*",
      "arn:${Partition}:rds:${Region}:${Account}:tenant-database:.*"
    ],
    "rds:modifyactivitystream": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:modifycurrentdbclustercapacity": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:modifycustomdbengineversion": [
      "arn:${Partition}:rds:${Region}:${Account}:cev:.*"
    ],
    "rds:modifydbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*"
    ],
    "rds:modifydbclusterendpoint": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-endpoint:.*"
    ],
    "rds:modifydbclusterparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*"
    ],
    "rds:modifydbclustersnapshotattribute": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*"
    ],
    "rds:modifydbinstance": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:modifydbparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*"
    ],
    "rds:modifydbproxy": [
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*"
    ],
    "rds:modifydbproxyendpoint": [
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy-endpoint:.*"
    ],
    "rds:modifydbproxytargetgroup": [
      "arn:${Partition}:rds:${Region}:${Account}:target-group:.*"
    ],
    "rds:modifydbshardgroup": [
      "arn:${Partition}:rds:${Region}:${Account}:shard-group:.*"
    ],
    "rds:modifydbsnapshot": [
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:modifydbsnapshotattribute": [
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:modifydbsubnetgroup": [
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:modifyeventsubscription": [
      "arn:${Partition}:rds:${Region}:${Account}:es:.*"
    ],
    "rds:modifyglobalcluster": [
      "arn:${Partition}:rds::${Account}:global-cluster:.*"
    ],
    "rds:modifyintegration": [
      "arn:${Partition}:rds:${Region}:${Account}:integration:.*"
    ],
    "rds:modifyoptiongroup": [
      "arn:${Partition}:rds:${Region}:${Account}:og:.*"
    ],
    "rds:modifytenantdatabase": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:tenant-database:.*"
    ],
    "rds:promotereadreplica": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:promotereadreplicadbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:purchasereserveddbinstancesoffering": [
      "arn:${Partition}:rds:${Region}:${Account}:ri:.*"
    ],
    "rds:rebootdbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:rebootdbinstance": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:rebootdbshardgroup": [
      "arn:${Partition}:rds:${Region}:${Account}:shard-group:.*"
    ],
    "rds:registerdbproxytargets": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:target-group:.*"
    ],
    "rds:removefromglobalcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds::${Account}:global-cluster:.*"
    ],
    "rds:removerolefromdbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:removerolefromdbinstance": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:removesourceidentifierfromsubscription": [
      "arn:${Partition}:rds:${Region}:${Account}:es:.*"
    ],
    "rds:removetagsfromresource": [
      "arn:${Partition}:rds:${Region}:${Account}:auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cev:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-endpoint:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:deployment:.*",
      "arn:${Partition}:rds:${Region}:${Account}:es:.*",
      "arn:${Partition}:rds::${Account}:global-cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:integration:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db-proxy-endpoint:.*",
      "arn:${Partition}:rds:${Region}:${Account}:ri:.*",
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*",
      "arn:${Partition}:rds:${Region}:${Account}:shard-group:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot-tenant-database:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*",
      "arn:${Partition}:rds:${Region}:${Account}:target-group:.*",
      "arn:${Partition}:rds:${Region}:${Account}:tenant-database:.*"
    ],
    "rds:resetdbclusterparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*"
    ],
    "rds:resetdbparametergroup": [
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*"
    ],
    "rds:restoredbclusterfroms3": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:restoredbclusterfromsnapshot": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:restoredbclustertopointintime": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:restoredbinstancefromdbsnapshot": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:restoredbinstancefroms3": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:restoredbinstancetopointintime": [
      "arn:${Partition}:rds:${Region}:${Account}:auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:og:.*",
      "arn:${Partition}:rds:${Region}:${Account}:pg:.*",
      "arn:${Partition}:rds:${Region}:${Account}:subgrp:.*"
    ],
    "rds:revokedbsecuritygroupingress": [
      "arn:${Partition}:rds:${Region}:${Account}:secgrp:.*"
    ],
    "rds:startactivitystream": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:startdbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:startdbinstance": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:startdbinstanceautomatedbackupsreplication": [
      "arn:${Partition}:rds:${Region}:${Account}:auto-backup:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:startexporttask": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:cluster-snapshot:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:stopactivitystream": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:stopdbcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*"
    ],
    "rds:stopdbinstance": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*",
      "arn:${Partition}:rds:${Region}:${Account}:snapshot:.*"
    ],
    "rds:stopdbinstanceautomatedbackupsreplication": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "rds:switchoverbluegreendeployment": [
      "arn:${Partition}:rds:${Region}:${Account}:deployment:.*"
    ],
    "rds:switchoverglobalcluster": [
      "arn:${Partition}:rds:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:rds::${Account}:global-cluster:.*"
    ],
    "rds:switchoverreadreplica": [
      "arn:${Partition}:rds:${Region}:${Account}:db:.*"
    ],
    "redshift-data:batchexecutestatement": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-data:describetable": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-data:executestatement": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-data:getstagingbucketlocation": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:managed-workgroup/.*"
    ],
    "redshift-data:listdatabases": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-data:listschemas": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-data:listtables": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:convertrecoverypointtosnapshot": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:recoverypoint/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*"
    ],
    "redshift-serverless:createcustomdomainassociation": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:createendpointaccess": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:managedvpcendpoint/.*"
    ],
    "redshift-serverless:createnamespace": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*"
    ],
    "redshift-serverless:createscheduledaction": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*"
    ],
    "redshift-serverless:createsnapshot": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*"
    ],
    "redshift-serverless:createsnapshotcopyconfiguration": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*"
    ],
    "redshift-serverless:createworkgroup": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:deletecustomdomainassociation": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:deleteendpointaccess": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:managedvpcendpoint/.*"
    ],
    "redshift-serverless:deletenamespace": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*"
    ],
    "redshift-serverless:deletesnapshot": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*"
    ],
    "redshift-serverless:deleteworkgroup": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:getcredentials": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:getcustomdomainassociation": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:getendpointaccess": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:managedvpcendpoint/.*"
    ],
    "redshift-serverless:getidentitycenterauthtoken": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:getmanagedworkgroup": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:managed-workgroup/.*"
    ],
    "redshift-serverless:getnamespace": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*"
    ],
    "redshift-serverless:getrecoverypoint": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:recoverypoint/.*"
    ],
    "redshift-serverless:getsnapshot": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*"
    ],
    "redshift-serverless:getworkgroup": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:listautonomicsdenylist": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:listendpointaccess": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:managedvpcendpoint/.*"
    ],
    "redshift-serverless:listrecoverypoints": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:recoverypoint/.*"
    ],
    "redshift-serverless:listsnapshotcopyconfigurations": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*"
    ],
    "redshift-serverless:listsnapshots": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*"
    ],
    "redshift-serverless:listtagsforresource": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:restorefromrecoverypoint": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:recoverypoint/.*"
    ],
    "redshift-serverless:restorefromsnapshot": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*"
    ],
    "redshift-serverless:restoretablefromrecoverypoint": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:recoverypoint/.*"
    ],
    "redshift-serverless:restoretablefromsnapshot": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*"
    ],
    "redshift-serverless:tagresource": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:recoverypoint/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:untagresource": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:recoverypoint/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*",
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:updateautonomicsdenylist": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:updatecustomdomainassociation": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift-serverless:updateendpointaccess": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:managedvpcendpoint/.*"
    ],
    "redshift-serverless:updatenamespace": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:namespace/.*"
    ],
    "redshift-serverless:updatesnapshot": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:snapshot/.*"
    ],
    "redshift-serverless:updateworkgroup": [
      "arn:${Partition}:redshift-serverless:${Region}:${Account}:workgroup/.*"
    ],
    "redshift:associatedatashareconsumer": [
      "arn:${Partition}:redshift:${Region}:${Account}:datashare:.*"
    ],
    "redshift:authorizeclustersecuritygroupingress": [
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroupingress:.*"
    ],
    "redshift:authorizedatashare": [
      "arn:${Partition}:redshift:${Region}:${Account}:datashare:.*"
    ],
    "redshift:authorizeendpointaccess": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:authorizeinboundintegration": [
      "arn:${Partition}:redshift:${Region}:${Account}:namespace:.*"
    ],
    "redshift:authorizesnapshotaccess": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:batchdeleteclustersnapshots": [
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:batchmodifyclustersnapshots": [
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:cancelquerysession": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:cancelresize": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:copyclustersnapshot": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:createcluster": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:createclusterparametergroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:parametergroup:.*"
    ],
    "redshift:createclustersecuritygroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroup:.*"
    ],
    "redshift:createclustersnapshot": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:createclustersubnetgroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:subnetgroup:.*"
    ],
    "redshift:createclusteruser": [
      "arn:${Partition}:redshift:${Region}:${Account}:dbuser:.*"
    ],
    "redshift:createcustomdomainassociation": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:createendpointaccess": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:createeventsubscription": [
      "arn:${Partition}:redshift:${Region}:${Account}:eventsubscription:.*"
    ],
    "redshift:createhsmclientcertificate": [
      "arn:${Partition}:redshift:${Region}:${Account}:hsmclientcertificate:.*"
    ],
    "redshift:createhsmconfiguration": [
      "arn:${Partition}:redshift:${Region}:${Account}:hsmconfiguration:.*"
    ],
    "redshift:createinboundintegration": [
      "arn:${Partition}:redshift:${Region}:${Account}:namespace:.*"
    ],
    "redshift:createintegration": [
      "arn:${Partition}:redshift:${Region}:${Account}:integration:.*"
    ],
    "redshift:createsnapshotcopygrant": [
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotcopygrant:.*"
    ],
    "redshift:createsnapshotschedule": [
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotschedule:.*"
    ],
    "redshift:createtags": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:eventsubscription:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:hsmclientcertificate:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:hsmconfiguration:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:integration:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroupingress:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotcopygrant:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotschedule:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:subnetgroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:usagelimit:.*"
    ],
    "redshift:createusagelimit": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:usagelimit:.*"
    ],
    "redshift:deauthorizedatashare": [
      "arn:${Partition}:redshift:${Region}:${Account}:datashare:.*"
    ],
    "redshift:deletecluster": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:deleteclusterparametergroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:parametergroup:.*"
    ],
    "redshift:deleteclustersecuritygroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroup:.*"
    ],
    "redshift:deleteclustersnapshot": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:deleteclustersubnetgroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:subnetgroup:.*"
    ],
    "redshift:deletecustomdomainassociation": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:deleteeventsubscription": [
      "arn:${Partition}:redshift:${Region}:${Account}:eventsubscription:.*"
    ],
    "redshift:deletehsmclientcertificate": [
      "arn:${Partition}:redshift:${Region}:${Account}:hsmclientcertificate:.*"
    ],
    "redshift:deletehsmconfiguration": [
      "arn:${Partition}:redshift:${Region}:${Account}:hsmconfiguration:.*"
    ],
    "redshift:deleteintegration": [
      "arn:${Partition}:redshift:${Region}:${Account}:integration:.*"
    ],
    "redshift:deletepartner": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:deleteqev2idcapplication": [
      "arn:${Partition}:redshift:${Region}:${Account}:qev2idcapplication:.*"
    ],
    "redshift:deleteredshiftidcapplication": [
      "arn:${Partition}:redshift:${Region}:${Account}:redshiftidcapplication:.*"
    ],
    "redshift:deleteresourcepolicy": [
      "arn:${Partition}:redshift:${Region}:${Account}:namespace:.*"
    ],
    "redshift:deletesnapshotcopygrant": [
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotcopygrant:.*"
    ],
    "redshift:deletesnapshotschedule": [
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotschedule:.*"
    ],
    "redshift:deletetags": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:eventsubscription:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:hsmclientcertificate:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:hsmconfiguration:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:integration:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroupingress:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotcopygrant:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotschedule:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:subnetgroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:usagelimit:.*"
    ],
    "redshift:deleteusagelimit": [
      "arn:${Partition}:redshift:${Region}:${Account}:usagelimit:.*"
    ],
    "redshift:describeautonomicsdenylist": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describeclusterparameters": [
      "arn:${Partition}:redshift:${Region}:${Account}:parametergroup:.*"
    ],
    "redshift:describeclusters": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describeclustersnapshots": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describeendpointaccess": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describeendpointauthorization": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describeintegrations": [
      "arn:${Partition}:redshift:${Region}:${Account}:integration:.*"
    ],
    "redshift:describeloggingstatus": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describenodeconfigurationoptions": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describepartners": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describeresize": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describesnapshotschedules": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotschedule:.*"
    ],
    "redshift:describetablerestorestatus": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:describetags": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:eventsubscription:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:hsmclientcertificate:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:hsmconfiguration:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:integration:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:parametergroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroupingress:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotcopygrant:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotschedule:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:subnetgroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:usagelimit:.*"
    ],
    "redshift:describeusagelimits": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:usagelimit:.*"
    ],
    "redshift:disablelogging": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:disablesnapshotcopy": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:disassociatedatashareconsumer": [
      "arn:${Partition}:redshift:${Region}:${Account}:datashare:.*"
    ],
    "redshift:enablelogging": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:enablesnapshotcopy": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:failoverprimarycompute": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:getclustercredentials": [
      "arn:${Partition}:redshift:${Region}:${Account}:dbname:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:dbuser:.*"
    ],
    "redshift:getclustercredentialswithiam": [
      "arn:${Partition}:redshift:${Region}:${Account}:dbname:.*"
    ],
    "redshift:getidentitycenterauthtoken": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:getreservednodeexchangeconfigurationoptions": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:getresourcepolicy": [
      "arn:${Partition}:redshift:${Region}:${Account}:namespace:.*"
    ],
    "redshift:joingroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:dbgroup:.*"
    ],
    "redshift:listrecommendations": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifyaquaconfiguration": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifyautonomicsdenylist": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifycluster": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifyclusterdbrevision": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifyclusteriamroles": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifyclustermaintenance": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifyclusterparametergroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:parametergroup:.*"
    ],
    "redshift:modifyclustersnapshot": [
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:modifyclustersnapshotschedule": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifyclustersubnetgroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:subnetgroup:.*"
    ],
    "redshift:modifycustomdomainassociation": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifyeventsubscription": [
      "arn:${Partition}:redshift:${Region}:${Account}:eventsubscription:.*"
    ],
    "redshift:modifyintegration": [
      "arn:${Partition}:redshift:${Region}:${Account}:integration:.*"
    ],
    "redshift:modifyqev2idcapplication": [
      "arn:${Partition}:redshift:${Region}:${Account}:qev2idcapplication:.*"
    ],
    "redshift:modifyredshiftidcapplication": [
      "arn:${Partition}:redshift:${Region}:${Account}:redshiftidcapplication:.*"
    ],
    "redshift:modifysnapshotcopyretentionperiod": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:modifysnapshotschedule": [
      "arn:${Partition}:redshift:${Region}:${Account}:snapshotschedule:.*"
    ],
    "redshift:modifyusagelimit": [
      "arn:${Partition}:redshift:${Region}:${Account}:usagelimit:.*"
    ],
    "redshift:pausecluster": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:putresourcepolicy": [
      "arn:${Partition}:redshift:${Region}:${Account}:namespace:.*"
    ],
    "redshift:rebootcluster": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:rejectdatashare": [
      "arn:${Partition}:redshift:${Region}:${Account}:datashare:.*"
    ],
    "redshift:resetclusterparametergroup": [
      "arn:${Partition}:redshift:${Region}:${Account}:parametergroup:.*"
    ],
    "redshift:resizecluster": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:restorefromclustersnapshot": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:restoretablefromclustersnapshot": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:resumecluster": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:revokeclustersecuritygroupingress": [
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroup:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:securitygroupingress:.*"
    ],
    "redshift:revokeendpointaccess": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:revokesnapshotaccess": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*",
      "arn:${Partition}:redshift:${Region}:${Account}:snapshot:.*"
    ],
    "redshift:rotateencryptionkey": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:updatepartnerstatus": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "redshift:viewqueriesinconsole": [
      "arn:${Partition}:redshift:${Region}:${Account}:cluster:.*"
    ],
    "refactor-spaces:deleteapplication": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:deleteenvironment": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:deleteroute": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:deleteservice": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:getapplication": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:getenvironment": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:getroute": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:getservice": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:listapplications": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:listenvironmentvpcs": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:listroutes": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:listservices": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:tagresource": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:untagresource": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "refactor-spaces:updateroute": [
      "arn:${Partition}:refactor-spaces:${Region}:${Account}:environment/.*"
    ],
    "rekognition:associatefaces": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:copyprojectversion": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:createdataset": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:createprojectversion": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:createstreamprocessor": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:createuser": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:deletecollection": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:deletedataset": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:deletefaces": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:deleteproject": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:deleteprojectpolicy": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:deleteprojectversion": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:deletestreamprocessor": [
      "arn:${Partition}:rekognition:${Region}:${Account}:streamprocessor/.*"
    ],
    "rekognition:deleteuser": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:describecollection": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:describedataset": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:describeprojectversions": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:describestreamprocessor": [
      "arn:${Partition}:rekognition:${Region}:${Account}:streamprocessor/.*"
    ],
    "rekognition:detectcustomlabels": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:detectmoderationlabels": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:disassociatefaces": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:distributedatasetentries": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:indexfaces": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:listdatasetentries": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:listdatasetlabels": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:listfaces": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:listprojectpolicies": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:listtagsforresource": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*",
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*",
      "arn:${Partition}:rekognition:${Region}:${Account}:streamprocessor/.*"
    ],
    "rekognition:listusers": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:putprojectpolicy": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:searchfaces": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:searchfacesbyimage": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:searchusers": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:searchusersbyimage": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:startfacesearch": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*"
    ],
    "rekognition:startmediaanalysisjob": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:startprojectversion": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:startstreamprocessor": [
      "arn:${Partition}:rekognition:${Region}:${Account}:streamprocessor/.*"
    ],
    "rekognition:stopprojectversion": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:stopstreamprocessor": [
      "arn:${Partition}:rekognition:${Region}:${Account}:streamprocessor/.*"
    ],
    "rekognition:tagresource": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*",
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*",
      "arn:${Partition}:rekognition:${Region}:${Account}:streamprocessor/.*"
    ],
    "rekognition:untagresource": [
      "arn:${Partition}:rekognition:${Region}:${Account}:collection/.*",
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*",
      "arn:${Partition}:rekognition:${Region}:${Account}:streamprocessor/.*"
    ],
    "rekognition:updatedatasetentries": [
      "arn:${Partition}:rekognition:${Region}:${Account}:project/.*"
    ],
    "rekognition:updatestreamprocessor": [
      "arn:${Partition}:rekognition:${Region}:${Account}:streamprocessor/.*"
    ],
    "repostspace:batchaddchannelroletoaccessors": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:batchaddrole": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:batchremovechannelrolefromaccessors": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:batchremoverole": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:createchannel": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:deletespace": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:deregisteradmin": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:getchannel": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:getspace": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:listchannels": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:listtagsforresource": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:registeradmin": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:sendinvites": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:tagresource": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:untagresource": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:updatechannel": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "repostspace:updatespace": [
      "arn:${Partition}:repostspace:${Region}:${Account}:space/.*"
    ],
    "resiliencehub:acceptresourcegroupingrecommendations": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:adddraftappversionresourcemappings": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:batchupdaterecommendationstatus": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:createapp": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:createappversionappcomponent": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:createappversionresource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:createassertion": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:createinputsource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:createpolicy": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*"
    ],
    "resiliencehub:createrecommendationtemplate": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:createreport": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:createresiliencypolicy": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:resiliency-policy/.*"
    ],
    "resiliencehub:createservice": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:createservicefunction": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:createservicefunctionresources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:createsystem": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:createtest": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:createuserjourney": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:deleteapp": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:deleteappassessment": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:deleteappinputsource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:deleteappversionappcomponent": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:deleteappversionresource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:deleteassertion": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:deleteinputsource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:deletepolicy": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*"
    ],
    "resiliencehub:deleterecommendationtemplate": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:deleteresiliencypolicy": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:resiliency-policy/.*"
    ],
    "resiliencehub:deleteservice": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:deleteservicefunction": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:deleteservicefunctionresources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:deletesystem": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:deletetest": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:deletetestsources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:deleteuserjourney": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:describeapp": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:describeappassessment": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:describeappversion": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:describeappversionappcomponent": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:describeappversionresource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:describeappversionresourcesresolutionstatus": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:describeappversiontemplate": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:describedraftappversionresourcesimportstatus": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:describeresiliencypolicy": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:resiliency-policy/.*"
    ],
    "resiliencehub:describeresourcegroupingrecommendationtask": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:getfailuremodefinding": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:getpolicy": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*"
    ],
    "resiliencehub:getservice": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:getsystem": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:gettest": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:gettestrun": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:getuserjourney": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:importapp": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:importpolicy": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:resiliency-policy/.*"
    ],
    "resiliencehub:importresourcestodraftappversion": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listalarmrecommendations": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listappassessmentcompliancedrifts": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listappassessmentresourcedrifts": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listappcomponentcompliances": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listappcomponentrecommendations": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listappinputsources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listappversionappcomponents": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listappversionresourcemappings": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listappversionresources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listappversions": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listassertions": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listfailuremodeassessments": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listfailuremodefindings": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listinputsources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listrecommendationtemplates": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listreports": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listresolvedtestruntargetresources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listresourcegroupingrecommendations": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listresources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listserviceevents": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listservicefunctions": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listservicetopologyedges": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listsoprecommendations": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listsystemevents": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:listtagsforresource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app-assessment/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:recommendation-template/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:resiliency-policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:listtestrecommendations": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listtestrundependencies": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listtestrunevents": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listtestruns": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listtestrunsourceevents": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listtestrunsources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listtests": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listtestsources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:listunsupportedappversionresources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:listuserjourneys": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:publishappversion": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:putdraftappversiontemplate": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:puttestsources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:rejectresourcegroupingrecommendations": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:removedraftappversionresourcemappings": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:resolveappversionresources": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:startappassessment": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:startfailuremodeassessment": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:startresourcegroupingrecommendationtask": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:starttestrun": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:stoptestrun": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:tagresource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app-assessment/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:recommendation-template/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:resiliency-policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:untagresource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app-assessment/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:recommendation-template/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:resiliency-policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:updateapp": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:updateappversion": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:updateappversionappcomponent": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:updateappversionresource": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:app/.*"
    ],
    "resiliencehub:updateassertion": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:updatedependency": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:updatefailuremodefinding": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:updatepolicy": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*"
    ],
    "resiliencehub:updateresiliencypolicy": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:resiliency-policy/.*"
    ],
    "resiliencehub:updateservice": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:updateservicefunction": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:updatesystem": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resiliencehub:updatetest": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:service/.*"
    ],
    "resiliencehub:updateuserjourney": [
      "arn:${Partition}:resiliencehub:${Region}:${Account}:policy/.*",
      "arn:${Partition}:resiliencehub:${Region}:${Account}:system/.*"
    ],
    "resource-explorer-2:deleteindex": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:index/.*"
    ],
    "resource-explorer-2:deleteresourcepolicy": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-explorer-2:deleteview": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-explorer-2:getmanagedview": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:managed-view/.*"
    ],
    "resource-explorer-2:getresourcepolicy": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-explorer-2:getview": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-explorer-2:listtagsforresource": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:index/.*",
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-explorer-2:putresourcepolicy": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-explorer-2:search": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-explorer-2:tagresource": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:index/.*",
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-explorer-2:untagresource": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:index/.*",
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-explorer-2:updateindextype": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:index/.*"
    ],
    "resource-explorer-2:updateview": [
      "arn:${Partition}:resource-explorer-2:${Region}:${Account}:view/.*"
    ],
    "resource-groups:associateresource": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:canceltagsynctask": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:deletegroup": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:deletegrouppolicy": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:disassociateresource": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:getgroup": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:getgroupconfiguration": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:getgrouppolicy": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:getgroupquery": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:gettags": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:gettagsynctask": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:groupresources": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:listgroupingstatuses": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:listgroupresources": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:listtagsynctasks": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:putgroupconfiguration": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:putgrouppolicy": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:starttagsynctask": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:tag": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:ungroupresources": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:untag": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:updategroup": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "resource-groups:updategroupquery": [
      "arn:${Partition}:resource-groups:${Region}:${Account}:group/.*"
    ],
    "robomaker:canceldeploymentjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-job/.*"
    ],
    "robomaker:cancelsimulationjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job/.*"
    ],
    "robomaker:cancelsimulationjobbatch": [
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job-batch/.*"
    ],
    "robomaker:cancelworldexportjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world-export-job/.*"
    ],
    "robomaker:cancelworldgenerationjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world-generation-job/.*"
    ],
    "robomaker:createrobotapplicationversion": [
      "arn:${Partition}:robomaker:${Region}:${Account}:robot-application/.*"
    ],
    "robomaker:createsimulationapplicationversion": [
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-application/.*"
    ],
    "robomaker:createworldexportjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world/.*"
    ],
    "robomaker:createworldgenerationjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world-template/.*"
    ],
    "robomaker:deletefleet": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-fleet/.*"
    ],
    "robomaker:deleterobot": [
      "arn:${Partition}:robomaker:${Region}:${Account}:robot/.*"
    ],
    "robomaker:deleterobotapplication": [
      "arn:${Partition}:robomaker:${Region}:${Account}:robot-application/.*"
    ],
    "robomaker:deletesimulationapplication": [
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-application/.*"
    ],
    "robomaker:deleteworldtemplate": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world-template/.*"
    ],
    "robomaker:deregisterrobot": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-fleet/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:robot/.*"
    ],
    "robomaker:describedeploymentjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-job/.*"
    ],
    "robomaker:describefleet": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-fleet/.*"
    ],
    "robomaker:describerobot": [
      "arn:${Partition}:robomaker:${Region}:${Account}:robot/.*"
    ],
    "robomaker:describerobotapplication": [
      "arn:${Partition}:robomaker:${Region}:${Account}:robot-application/.*"
    ],
    "robomaker:describesimulationapplication": [
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-application/.*"
    ],
    "robomaker:describesimulationjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job/.*"
    ],
    "robomaker:describesimulationjobbatch": [
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job-batch/.*"
    ],
    "robomaker:describeworld": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world/.*"
    ],
    "robomaker:describeworldexportjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world-export-job/.*"
    ],
    "robomaker:describeworldgenerationjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world-generation-job/.*"
    ],
    "robomaker:describeworldtemplate": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world-template/.*"
    ],
    "robomaker:getworldtemplatebody": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world-template/.*"
    ],
    "robomaker:listtagsforresource": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-fleet/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:robot/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:robot-application/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-application/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job-batch/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world-export-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world-generation-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world-template/.*"
    ],
    "robomaker:registerrobot": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-fleet/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:robot/.*"
    ],
    "robomaker:restartsimulationjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job/.*"
    ],
    "robomaker:syncdeploymentjob": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-fleet/.*"
    ],
    "robomaker:tagresource": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-fleet/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:robot/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:robot-application/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-application/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job-batch/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world-export-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world-generation-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world-template/.*"
    ],
    "robomaker:untagresource": [
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-fleet/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:deployment-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:robot/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:robot-application/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-application/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-job-batch/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world-export-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world-generation-job/.*",
      "arn:${Partition}:robomaker:${Region}:${Account}:world-template/.*"
    ],
    "robomaker:updaterobotapplication": [
      "arn:${Partition}:robomaker:${Region}:${Account}:robot-application/.*"
    ],
    "robomaker:updatesimulationapplication": [
      "arn:${Partition}:robomaker:${Region}:${Account}:simulation-application/.*"
    ],
    "robomaker:updateworldtemplate": [
      "arn:${Partition}:robomaker:${Region}:${Account}:world-template/.*"
    ],
    "rolesanywhere:deleteattributemapping": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:profile/.*"
    ],
    "rolesanywhere:deletecrl": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:crl/.*"
    ],
    "rolesanywhere:deleteprofile": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:profile/.*"
    ],
    "rolesanywhere:deletetrustanchor": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:trust-anchor/.*"
    ],
    "rolesanywhere:disablecrl": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:crl/.*"
    ],
    "rolesanywhere:disableprofile": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:profile/.*"
    ],
    "rolesanywhere:disabletrustanchor": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:trust-anchor/.*"
    ],
    "rolesanywhere:enablecrl": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:crl/.*"
    ],
    "rolesanywhere:enableprofile": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:profile/.*"
    ],
    "rolesanywhere:enabletrustanchor": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:trust-anchor/.*"
    ],
    "rolesanywhere:getcrl": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:crl/.*"
    ],
    "rolesanywhere:getprofile": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:profile/.*"
    ],
    "rolesanywhere:getsubject": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:subject/.*"
    ],
    "rolesanywhere:gettrustanchor": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:trust-anchor/.*"
    ],
    "rolesanywhere:putattributemapping": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:profile/.*"
    ],
    "rolesanywhere:putnotificationsettings": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:trust-anchor/.*"
    ],
    "rolesanywhere:resetnotificationsettings": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:trust-anchor/.*"
    ],
    "rolesanywhere:tagresource": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:crl/.*",
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:profile/.*",
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:subject/.*",
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:trust-anchor/.*"
    ],
    "rolesanywhere:untagresource": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:crl/.*",
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:profile/.*",
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:subject/.*",
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:trust-anchor/.*"
    ],
    "rolesanywhere:updatecrl": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:crl/.*"
    ],
    "rolesanywhere:updateprofile": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:profile/.*"
    ],
    "rolesanywhere:updatetrustanchor": [
      "arn:${Partition}:rolesanywhere:${Region}:${Account}:trust-anchor/.*"
    ],
    "route53-recovery-cluster:getroutingcontrolstate": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-cluster:updateroutingcontrolstate": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-cluster:updateroutingcontrolstates": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:createcontrolpanel": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*"
    ],
    "route53-recovery-control-config:createroutingcontrol": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*"
    ],
    "route53-recovery-control-config:createsafetyrule": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*"
    ],
    "route53-recovery-control-config:deletecluster": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*"
    ],
    "route53-recovery-control-config:deletecontrolpanel": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:deleteresourcepolicy": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*"
    ],
    "route53-recovery-control-config:deleteroutingcontrol": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:deletesafetyrule": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:describecluster": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*"
    ],
    "route53-recovery-control-config:describecontrolpanel": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:describeroutingcontrol": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:describesafetyrule": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:getresourcepolicy": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*"
    ],
    "route53-recovery-control-config:listassociatedroute53healthchecks": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:listroutingcontrols": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:listsafetyrules": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:listtagsforresource": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*",
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:putresourcepolicy": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*"
    ],
    "route53-recovery-control-config:tagresource": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*",
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:untagresource": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*",
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:updatecluster": [
      "arn:${Partition}:route53-recovery-control::${Account}:cluster/.*"
    ],
    "route53-recovery-control-config:updatecontrolpanel": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:updateroutingcontrol": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-control-config:updatesafetyrule": [
      "arn:${Partition}:route53-recovery-control::${Account}:controlpanel/.*"
    ],
    "route53-recovery-readiness:createcell": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:cell/.*"
    ],
    "route53-recovery-readiness:createreadinesscheck": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:readiness-check/.*"
    ],
    "route53-recovery-readiness:createrecoverygroup": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:recovery-group/.*"
    ],
    "route53-recovery-readiness:createresourceset": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:resource-set/.*"
    ],
    "route53-recovery-readiness:deletecell": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:cell/.*"
    ],
    "route53-recovery-readiness:deletereadinesscheck": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:readiness-check/.*"
    ],
    "route53-recovery-readiness:deleterecoverygroup": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:recovery-group/.*"
    ],
    "route53-recovery-readiness:deleteresourceset": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:resource-set/.*"
    ],
    "route53-recovery-readiness:getarchitecturerecommendations": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:recovery-group/.*"
    ],
    "route53-recovery-readiness:getcell": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:cell/.*"
    ],
    "route53-recovery-readiness:getcellreadinesssummary": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:cell/.*"
    ],
    "route53-recovery-readiness:getreadinesscheck": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:readiness-check/.*"
    ],
    "route53-recovery-readiness:getreadinesscheckresourcestatus": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:readiness-check/.*"
    ],
    "route53-recovery-readiness:getreadinesscheckstatus": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:readiness-check/.*"
    ],
    "route53-recovery-readiness:getrecoverygroup": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:recovery-group/.*"
    ],
    "route53-recovery-readiness:getrecoverygroupreadinesssummary": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:recovery-group/.*"
    ],
    "route53-recovery-readiness:getresourceset": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:resource-set/.*"
    ],
    "route53-recovery-readiness:tagresource": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:cell/.*",
      "arn:${Partition}:route53-recovery-readiness::${Account}:readiness-check/.*",
      "arn:${Partition}:route53-recovery-readiness::${Account}:recovery-group/.*",
      "arn:${Partition}:route53-recovery-readiness::${Account}:resource-set/.*"
    ],
    "route53-recovery-readiness:untagresource": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:cell/.*",
      "arn:${Partition}:route53-recovery-readiness::${Account}:readiness-check/.*",
      "arn:${Partition}:route53-recovery-readiness::${Account}:recovery-group/.*",
      "arn:${Partition}:route53-recovery-readiness::${Account}:resource-set/.*"
    ],
    "route53-recovery-readiness:updatecell": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:cell/.*"
    ],
    "route53-recovery-readiness:updatereadinesscheck": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:readiness-check/.*"
    ],
    "route53-recovery-readiness:updaterecoverygroup": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:recovery-group/.*"
    ],
    "route53-recovery-readiness:updateresourceset": [
      "arn:${Partition}:route53-recovery-readiness::${Account}:resource-set/.*"
    ],
    "route53:activatekeysigningkey": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:associatevpcwithhostedzone": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:changecidrcollection": [
      "arn:${Partition}:route53:::cidrcollection/.*"
    ],
    "route53:changeresourcerecordsets": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:changetagsforresource": [
      "arn:${Partition}:route53:::healthcheck/.*",
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:createkeysigningkey": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:createqueryloggingconfig": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:createtrafficpolicyinstance": [
      "arn:${Partition}:route53:::hostedzone/.*",
      "arn:${Partition}:route53:::trafficpolicy/.*"
    ],
    "route53:createtrafficpolicyversion": [
      "arn:${Partition}:route53:::trafficpolicy/.*"
    ],
    "route53:createvpcassociationauthorization": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:deactivatekeysigningkey": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:deletecidrcollection": [
      "arn:${Partition}:route53:::cidrcollection/.*"
    ],
    "route53:deletehealthcheck": [
      "arn:${Partition}:route53:::healthcheck/.*"
    ],
    "route53:deletehostedzone": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:deletekeysigningkey": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:deletequeryloggingconfig": [
      "arn:${Partition}:route53:::queryloggingconfig/.*"
    ],
    "route53:deletereusabledelegationset": [
      "arn:${Partition}:route53:::delegationset/.*"
    ],
    "route53:deletetrafficpolicy": [
      "arn:${Partition}:route53:::trafficpolicy/.*"
    ],
    "route53:deletetrafficpolicyinstance": [
      "arn:${Partition}:route53:::trafficpolicyinstance/.*"
    ],
    "route53:deletevpcassociationauthorization": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:disablehostedzonednssec": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:disassociatevpcfromhostedzone": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:enablehostedzonednssec": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:getchange": [
      "arn:${Partition}:route53:::change/.*"
    ],
    "route53:getdnssec": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:gethealthcheck": [
      "arn:${Partition}:route53:::healthcheck/.*"
    ],
    "route53:gethealthchecklastfailurereason": [
      "arn:${Partition}:route53:::healthcheck/.*"
    ],
    "route53:gethealthcheckstatus": [
      "arn:${Partition}:route53:::healthcheck/.*"
    ],
    "route53:gethostedzone": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:gethostedzonelimit": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:getqueryloggingconfig": [
      "arn:${Partition}:route53:::queryloggingconfig/.*"
    ],
    "route53:getreusabledelegationset": [
      "arn:${Partition}:route53:::delegationset/.*"
    ],
    "route53:getreusabledelegationsetlimit": [
      "arn:${Partition}:route53:::delegationset/.*"
    ],
    "route53:gettrafficpolicy": [
      "arn:${Partition}:route53:::trafficpolicy/.*"
    ],
    "route53:gettrafficpolicyinstance": [
      "arn:${Partition}:route53:::trafficpolicyinstance/.*"
    ],
    "route53:listcidrblocks": [
      "arn:${Partition}:route53:::cidrcollection/.*"
    ],
    "route53:listcidrlocations": [
      "arn:${Partition}:route53:::cidrcollection/.*"
    ],
    "route53:listqueryloggingconfigs": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:listresourcerecordsets": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:listtagsforresource": [
      "arn:${Partition}:route53:::healthcheck/.*",
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:listtagsforresources": [
      "arn:${Partition}:route53:::healthcheck/.*",
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:listtrafficpolicyinstancesbyhostedzone": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:listtrafficpolicyinstancesbypolicy": [
      "arn:${Partition}:route53:::trafficpolicy/.*"
    ],
    "route53:listtrafficpolicyversions": [
      "arn:${Partition}:route53:::trafficpolicy/.*"
    ],
    "route53:listvpcassociationauthorizations": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:updatehealthcheck": [
      "arn:${Partition}:route53:::healthcheck/.*"
    ],
    "route53:updatehostedzonecomment": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:updatehostedzonefeatures": [
      "arn:${Partition}:route53:::hostedzone/.*"
    ],
    "route53:updatetrafficpolicycomment": [
      "arn:${Partition}:route53:::trafficpolicy/.*"
    ],
    "route53:updatetrafficpolicyinstance": [
      "arn:${Partition}:route53:::trafficpolicyinstance/.*"
    ],
    "route53globalresolver:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:route53globalresolver::${Account}:global-resolver/.*"
    ],
    "route53globalresolver:createaccesssource": [
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*"
    ],
    "route53globalresolver:createaccesstoken": [
      "arn:${Partition}:route53globalresolver::${Account}:access-token/.*"
    ],
    "route53globalresolver:creatednsview": [
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*"
    ],
    "route53globalresolver:createfirewalldomainlist": [
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*"
    ],
    "route53globalresolver:createfirewallrule": [
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*",
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*"
    ],
    "route53globalresolver:createglobalresolver": [
      "arn:${Partition}:route53globalresolver::${Account}:global-resolver/.*"
    ],
    "route53globalresolver:deleteaccesssource": [
      "arn:${Partition}:route53globalresolver::${Account}:access-source/.*"
    ],
    "route53globalresolver:deleteaccesstoken": [
      "arn:${Partition}:route53globalresolver::${Account}:access-token/.*"
    ],
    "route53globalresolver:deletednsview": [
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*"
    ],
    "route53globalresolver:deletefirewalldomainlist": [
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*"
    ],
    "route53globalresolver:deleteglobalresolver": [
      "arn:${Partition}:route53globalresolver::${Account}:global-resolver/.*"
    ],
    "route53globalresolver:disablednsview": [
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*"
    ],
    "route53globalresolver:enablednsview": [
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*"
    ],
    "route53globalresolver:getaccesssource": [
      "arn:${Partition}:route53globalresolver::${Account}:access-source/.*"
    ],
    "route53globalresolver:getaccesstoken": [
      "arn:${Partition}:route53globalresolver::${Account}:access-token/.*"
    ],
    "route53globalresolver:getdnsview": [
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*"
    ],
    "route53globalresolver:getfirewalldomainlist": [
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*"
    ],
    "route53globalresolver:getglobalresolver": [
      "arn:${Partition}:route53globalresolver::${Account}:global-resolver/.*"
    ],
    "route53globalresolver:importfirewalldomains": [
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*"
    ],
    "route53globalresolver:listfirewalldomains": [
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*"
    ],
    "route53globalresolver:listfirewallrules": [
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*"
    ],
    "route53globalresolver:listtagsforresource": [
      "arn:${Partition}:route53globalresolver::${Account}:access-source/.*",
      "arn:${Partition}:route53globalresolver::${Account}:access-token/.*",
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*",
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*",
      "arn:${Partition}:route53globalresolver::${Account}:global-resolver/.*"
    ],
    "route53globalresolver:tagresource": [
      "arn:${Partition}:route53globalresolver::${Account}:access-source/.*",
      "arn:${Partition}:route53globalresolver::${Account}:access-token/.*",
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*",
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*",
      "arn:${Partition}:route53globalresolver::${Account}:global-resolver/.*"
    ],
    "route53globalresolver:untagresource": [
      "arn:${Partition}:route53globalresolver::${Account}:access-source/.*",
      "arn:${Partition}:route53globalresolver::${Account}:access-token/.*",
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*",
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*",
      "arn:${Partition}:route53globalresolver::${Account}:global-resolver/.*"
    ],
    "route53globalresolver:updateaccesssource": [
      "arn:${Partition}:route53globalresolver::${Account}:access-source/.*"
    ],
    "route53globalresolver:updateaccesstoken": [
      "arn:${Partition}:route53globalresolver::${Account}:access-token/.*"
    ],
    "route53globalresolver:updatednsview": [
      "arn:${Partition}:route53globalresolver::${Account}:dns-view/.*"
    ],
    "route53globalresolver:updatefirewalldomains": [
      "arn:${Partition}:route53globalresolver::${Account}:firewall-domain-list/.*"
    ],
    "route53globalresolver:updateglobalresolver": [
      "arn:${Partition}:route53globalresolver::${Account}:global-resolver/.*"
    ],
    "route53profiles:getprofilepolicy": [
      "arn:${Partition}:route53profiles:${Region}:${Account}:profile/.*"
    ],
    "route53profiles:putprofilepolicy": [
      "arn:${Partition}:route53profiles:${Region}:${Account}:profile/.*"
    ],
    "route53profiles:tagresource": [
      "arn:${Partition}:route53profiles:${Region}:${Account}:profile/.*",
      "arn:${Partition}:route53profiles:${Region}:${Account}:profile-association/.*"
    ],
    "route53profiles:untagresource": [
      "arn:${Partition}:route53profiles:${Region}:${Account}:profile/.*",
      "arn:${Partition}:route53profiles:${Region}:${Account}:profile-association/.*"
    ],
    "route53resolver:associatefirewallrulegroup": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group-association/.*"
    ],
    "route53resolver:associateresolverendpointipaddress": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*"
    ],
    "route53resolver:associateresolverquerylogconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*"
    ],
    "route53resolver:associateresolverrule": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:createfirewalldomainlist": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*"
    ],
    "route53resolver:createfirewallrule": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*"
    ],
    "route53resolver:createfirewallrulegroup": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*"
    ],
    "route53resolver:createoutpostresolver": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:outpost-resolver/.*"
    ],
    "route53resolver:createresolverendpoint": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*"
    ],
    "route53resolver:createresolverquerylogconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*"
    ],
    "route53resolver:createresolverrule": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:deletefirewalldomainlist": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*"
    ],
    "route53resolver:deletefirewallrule": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*"
    ],
    "route53resolver:deletefirewallrulegroup": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*"
    ],
    "route53resolver:deleteoutpostresolver": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:outpost-resolver/.*"
    ],
    "route53resolver:deleteresolverendpoint": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*"
    ],
    "route53resolver:deleteresolverquerylogconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*"
    ],
    "route53resolver:deleteresolverrule": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:disassociatefirewallrulegroup": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group-association/.*"
    ],
    "route53resolver:disassociateresolverendpointipaddress": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*"
    ],
    "route53resolver:disassociateresolverquerylogconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*"
    ],
    "route53resolver:disassociateresolverrule": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:getfirewallconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-config/.*"
    ],
    "route53resolver:getfirewalldomainlist": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*"
    ],
    "route53resolver:getfirewallrulegroup": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*"
    ],
    "route53resolver:getfirewallrulegroupassociation": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group-association/.*"
    ],
    "route53resolver:getfirewallrulegrouppolicy": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*"
    ],
    "route53resolver:getoutpostresolver": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:outpost-resolver/.*"
    ],
    "route53resolver:getresolverconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-config/.*"
    ],
    "route53resolver:getresolverdnssecconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-dnssec-config/.*"
    ],
    "route53resolver:getresolverendpoint": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*"
    ],
    "route53resolver:getresolverquerylogconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*"
    ],
    "route53resolver:getresolverquerylogconfigpolicy": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*"
    ],
    "route53resolver:getresolverrule": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:autodefined-rule/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:getresolverruleassociation": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:autodefined-rule/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:getresolverrulepolicy": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:importfirewalldomains": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*"
    ],
    "route53resolver:listfirewalldomains": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*"
    ],
    "route53resolver:listfirewallrules": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*"
    ],
    "route53resolver:listresolverconfigs": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-config/.*"
    ],
    "route53resolver:listresolverdnssecconfigs": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-dnssec-config/.*"
    ],
    "route53resolver:listresolverendpointipaddresses": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*"
    ],
    "route53resolver:listtagsforresource": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group-association/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:outpost-resolver/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:putfirewallrulegrouppolicy": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*"
    ],
    "route53resolver:putresolverquerylogconfigpolicy": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*"
    ],
    "route53resolver:putresolverrulepolicy": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:tagresource": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-config/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group-association/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:outpost-resolver/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-dnssec-config/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:untagresource": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-config/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group-association/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:outpost-resolver/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-dnssec-config/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-query-log-config/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "route53resolver:updatefirewallconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-config/.*"
    ],
    "route53resolver:updatefirewalldomains": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*"
    ],
    "route53resolver:updatefirewallrule": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-domain-list/.*",
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group/.*"
    ],
    "route53resolver:updatefirewallrulegroupassociation": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:firewall-rule-group-association/.*"
    ],
    "route53resolver:updateoutpostresolver": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:outpost-resolver/.*"
    ],
    "route53resolver:updateresolverconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-config/.*"
    ],
    "route53resolver:updateresolverdnssecconfig": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-dnssec-config/.*"
    ],
    "route53resolver:updateresolverendpoint": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/.*"
    ],
    "route53resolver:updateresolverrule": [
      "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-rule/.*"
    ],
    "rtbfabric:acceptlink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:associatecertificate": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:createinboundexternallink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:createlinkroutingrule": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:createoutboundexternallink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:deleteinboundexternallink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:deletelink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:deletelinkroutingrule": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:deleteoutboundexternallink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:deleterequestergateway": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:deleterespondergateway": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:disassociatecertificate": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:getcertificateassociation": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:getinboundexternallink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:getlink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:getlinkroutingrule": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:getoutboundexternallink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:getrequestergateway": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:getrespondergateway": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:listcertificateassociations": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:listlinkroutingrules": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:listtagsforresource": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:rejectlink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:tagresource": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:untagresource": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:updatelink": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:updatelinkmoduleflow": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:updatelinkroutingrule": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:updaterequestergateway": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rtbfabric:updaterespondergateway": [
      "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/.*"
    ],
    "rum:batchcreaterummetricdefinitions": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:batchdeleterummetricdefinitions": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:batchgetrummetricdefinitions": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:createappmonitor": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:deleteappmonitor": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:deleteresourcepolicy": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:deleterummetricsdestination": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:getappmonitor": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:getappmonitordata": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:getresourcepolicy": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:listrummetricsdestinations": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:putresourcepolicy": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:putrumevents": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:putrummetricsdestination": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:tagresource": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:untagresource": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:updateappmonitor": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "rum:updaterummetricdefinition": [
      "arn:${Partition}:rum:${Region}:${Account}:appmonitor/.*"
    ],
    "s3-object-lambda:abortmultipartupload": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:deleteobject": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:deleteobjecttagging": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:deleteobjectversion": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:deleteobjectversiontagging": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:getobject": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:getobjectacl": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:getobjectlegalhold": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:getobjectretention": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:getobjecttagging": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:getobjectversion": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:getobjectversionacl": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:getobjectversiontagging": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:listbucket": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:listbucketmultipartuploads": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:listbucketversions": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:listmultipartuploadparts": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:putobject": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:putobjectacl": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:putobjectlegalhold": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:putobjectretention": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:putobjecttagging": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:putobjectversionacl": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:putobjectversiontagging": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:restoreobject": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-object-lambda:writegetobjectresponse": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3-outposts:abortmultipartupload": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:createaccesspoint": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:createbucket": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:createendpoint": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:deleteaccesspoint": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:deleteaccesspointpolicy": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:deletebucket": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:deletebucketpolicy": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:deleteendpoint": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:deleteobject": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:deleteobjecttagging": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:deleteobjectversion": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:deleteobjectversiontagging": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getaccesspointpolicy": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getbucket": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getbucketpolicy": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getbuckettagging": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getbucketversioning": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getlifecycleconfiguration": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getobject": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getobjecttagging": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getobjectversion": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getobjectversionforreplication": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getobjectversiontagging": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:getreplicationconfiguration": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:listbucket": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:listbucketmultipartuploads": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:listbucketversions": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:listmultipartuploadparts": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putaccesspointpolicy": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putbucketpolicy": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putbuckettagging": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putbucketversioning": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putlifecycleconfiguration": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putobject": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putobjectacl": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putobjecttagging": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putobjectversiontagging": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:putreplicationconfiguration": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:replicatedelete": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:replicateobject": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3-outposts:replicatetags": [
      "arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/.*"
    ],
    "s3:abortmultipartupload": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:associateaccessgrantsidentitycenter": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:bypassgovernanceretention": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:createaccessgrant": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/.*"
    ],
    "s3:createaccessgrantsinstance": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:createaccessgrantslocation": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/.*"
    ],
    "s3:createaccesspoint": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:createaccesspointforobjectlambda": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:createbucket": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:createbucketmetadatatableconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:createmultiregionaccesspoint": [
      "arn:${Partition}:s3::${Account}:accesspoint/.*"
    ],
    "s3:deleteaccessgrant": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/.*"
    ],
    "s3:deleteaccessgrantsinstance": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:deleteaccessgrantsinstanceresourcepolicy": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:deleteaccessgrantslocation": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/.*"
    ],
    "s3:deleteaccesspoint": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:deleteaccesspointforobjectlambda": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:deleteaccesspointpolicy": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:deleteaccesspointpolicyforobjectlambda": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:deletebucket": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deletebucketmetadatatableconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deletebucketpolicy": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deletebucketwebsite": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deletejobtagging": [
      "arn:${Partition}:s3:${Region}:${Account}:job/.*"
    ],
    "s3:deletemultiregionaccesspoint": [
      "arn:${Partition}:s3::${Account}:accesspoint/.*"
    ],
    "s3:deleteobject": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deleteobjectannotation": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deleteobjecttagging": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deleteobjectversion": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deleteobjectversionannotation": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deleteobjectversiontagging": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:deletestoragelensconfiguration": [
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens/.*"
    ],
    "s3:deletestoragelensconfigurationtagging": [
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens/.*"
    ],
    "s3:deletestoragelensgroup": [
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/.*"
    ],
    "s3:describejob": [
      "arn:${Partition}:s3:${Region}:${Account}:job/.*"
    ],
    "s3:describemultiregionaccesspointoperation": [
      "arn:${Partition}:s3:us-west-2:${Account}:async-request/mrap/.*"
    ],
    "s3:dissociateaccessgrantsidentitycenter": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:getaccelerateconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getaccessgrant": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/.*"
    ],
    "s3:getaccessgrantsinstance": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:getaccessgrantsinstanceforprefix": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:getaccessgrantsinstanceresourcepolicy": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:getaccessgrantslocation": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/.*"
    ],
    "s3:getaccesspointconfigurationforobjectlambda": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:getaccesspointforobjectlambda": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:getaccesspointpolicy": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:getaccesspointpolicyforobjectlambda": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:getaccesspointpolicystatus": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:getaccesspointpolicystatusforobjectlambda": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:getanalyticsconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketabac": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketacl": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketcors": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketlocation": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketlogging": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketmetadatatableconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketnotification": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketobjectlockconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketownershipcontrols": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketpolicy": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketpolicystatus": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketpublicaccessblock": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketrequestpayment": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbuckettagging": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketversioning": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getbucketwebsite": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getdataaccess": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:getencryptionconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getintelligenttieringconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getinventoryconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getjobtagging": [
      "arn:${Partition}:s3:${Region}:${Account}:job/.*"
    ],
    "s3:getlifecycleconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getmetricsconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getmultiregionaccesspoint": [
      "arn:${Partition}:s3::${Account}:accesspoint/.*"
    ],
    "s3:getmultiregionaccesspointpolicy": [
      "arn:${Partition}:s3::${Account}:accesspoint/.*"
    ],
    "s3:getmultiregionaccesspointpolicystatus": [
      "arn:${Partition}:s3::${Account}:accesspoint/.*"
    ],
    "s3:getmultiregionaccesspointroutes": [
      "arn:${Partition}:s3::${Account}:accesspoint/.*"
    ],
    "s3:getobject": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectacl": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectannotation": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectattributes": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectlegalhold": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectretention": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjecttagging": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjecttorrent": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectversion": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectversionacl": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectversionannotation": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectversionannotationforreplication": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectversionattributes": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectversionforreplication": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectversiontagging": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getobjectversiontorrent": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getreplicationconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:getstoragelensconfiguration": [
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens/.*"
    ],
    "s3:getstoragelensconfigurationtagging": [
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens/.*"
    ],
    "s3:getstoragelensdashboard": [
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens/.*"
    ],
    "s3:getstoragelensgroup": [
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/.*"
    ],
    "s3:initiatereplication": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:listaccessgrants": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:listaccessgrantslocations": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:listbucket": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:listbucketmultipartuploads": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:listbucketversions": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:listcalleraccessgrants": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:listmultipartuploadparts": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:listobjectannotations": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:listobjectversionannotations": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:listtagsforresource": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/.*",
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default",
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/.*",
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*",
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/.*"
    ],
    "s3:objectowneroverridetobucketowner": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:pausereplication": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putaccelerateconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putaccessgrantsinstanceresourcepolicy": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default"
    ],
    "s3:putaccesspointconfigurationforobjectlambda": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:putaccesspointpolicy": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:putaccesspointpolicyforobjectlambda": [
      "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/.*"
    ],
    "s3:putanalyticsconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketabac": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketacl": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketcors": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketlogging": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketnotification": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketobjectlockconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketownershipcontrols": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketpolicy": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketpublicaccessblock": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketrequestpayment": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbuckettagging": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketversioning": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putbucketwebsite": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putencryptionconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putintelligenttieringconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putinventoryconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putjobtagging": [
      "arn:${Partition}:s3:${Region}:${Account}:job/.*"
    ],
    "s3:putlifecycleconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putmetricsconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putmultiregionaccesspointpolicy": [
      "arn:${Partition}:s3::${Account}:accesspoint/.*"
    ],
    "s3:putobject": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putobjectacl": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putobjectannotation": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putobjectlegalhold": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putobjectretention": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putobjecttagging": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putobjectversionacl": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putobjectversionannotation": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putobjectversiontagging": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putreplicationconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:putstoragelensconfigurationtagging": [
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens/.*"
    ],
    "s3:replicatedelete": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:replicateobject": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:replicateobjectannotation": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:replicatetags": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:restoreobject": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:submitmultiregionaccesspointroutes": [
      "arn:${Partition}:s3::${Account}:accesspoint/.*"
    ],
    "s3:tagresource": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/.*",
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default",
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/.*",
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*",
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/.*"
    ],
    "s3:untagresource": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/.*",
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default",
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/.*",
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*",
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/.*"
    ],
    "s3:updateaccessgrantslocation": [
      "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/.*"
    ],
    "s3:updatebucketmetadataannotationtableconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:updatebucketmetadatainventorytableconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:updatebucketmetadatajournaltableconfiguration": [
      "arn:${Partition}:s3:::.*"
    ],
    "s3:updatejobpriority": [
      "arn:${Partition}:s3:${Region}:${Account}:job/.*"
    ],
    "s3:updatejobstatus": [
      "arn:${Partition}:s3:${Region}:${Account}:job/.*"
    ],
    "s3:updateobjectencryption": [
      "arn:${Partition}:s3:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3:::.*"
    ],
    "s3:updatestoragelensgroup": [
      "arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/.*"
    ],
    "s3express:createaccesspoint": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*"
    ],
    "s3express:createbucket": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:createsession": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:deleteaccesspoint": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*"
    ],
    "s3express:deleteaccesspointpolicy": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*"
    ],
    "s3express:deleteaccesspointscope": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*"
    ],
    "s3express:deletebucket": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:deletebucketpolicy": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:getaccesspoint": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*"
    ],
    "s3express:getaccesspointpolicy": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*"
    ],
    "s3express:getaccesspointscope": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*"
    ],
    "s3express:getbucketpolicy": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:getencryptionconfiguration": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:getinventoryconfiguration": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:getlifecycleconfiguration": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:getmetricsconfiguration": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:listtagsforresource": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:putaccesspointpolicy": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*"
    ],
    "s3express:putaccesspointscope": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*"
    ],
    "s3express:putbucketpolicy": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:putencryptionconfiguration": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:putinventoryconfiguration": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:putlifecycleconfiguration": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:putmetricsconfiguration": [
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:tagresource": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3express:untagresource": [
      "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/.*",
      "arn:${Partition}:s3express:${Region}:${Account}:bucket/.*"
    ],
    "s3files:clientmount": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:clientrootaccess": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:clientwrite": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:createaccesspoint": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:createmounttarget": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:deleteaccesspoint": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:deletefilesystem": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:deletefilesystempolicy": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:deletemounttarget": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:getaccesspoint": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:getfilesystem": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:getfilesystempolicy": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:getmounttarget": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:getsynchronizationconfiguration": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:listaccesspoints": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:listfilesystems": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:listmounttargets": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:listtagsforresource": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:putfilesystempolicy": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:putsynchronizationconfiguration": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:tagresource": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:untagresource": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3files:updatemounttarget": [
      "arn:${Partition}:s3files:${Region}:${Account}:file-system/.*"
    ],
    "s3tables:createnamespace": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:createtable": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:createtablebucket": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:deletenamespace": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:deletetable": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:deletetablebucket": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:deletetablebucketencryption": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:deletetablebucketmetricsconfiguration": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:deletetablebucketpolicy": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:deletetablebucketreplication": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:deletetablepolicy": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:deletetablereplication": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:getnamespace": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettable": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablebucket": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablebucketencryption": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablebucketmaintenanceconfiguration": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablebucketmetricsconfiguration": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablebucketpolicy": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablebucketreplication": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablebucketstorageclass": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettabledata": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettableencryption": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablemaintenanceconfiguration": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablemaintenancejobstatus": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablemetadatalocation": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablepolicy": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablerecordexpirationconfiguration": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablerecordexpirationjobstatus": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablereplication": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablereplicationstatus": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:gettablestorageclass": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:listnamespaces": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:listtables": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:listtagsforresource": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablebucketencryption": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablebucketmaintenanceconfiguration": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablebucketmetricsconfiguration": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablebucketpolicy": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablebucketreplication": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablebucketstorageclass": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttabledata": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttableencryption": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablemaintenanceconfiguration": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablepolicy": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablerecordexpirationconfiguration": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablereplication": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:puttablestorageclass": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:renametable": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:tagresource": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:untagresource": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3tables:updatetablemetadatalocation": [
      "arn:${Partition}:s3tables:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:createindex": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:createvectorbucket": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:deleteindex": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:deletevectorbucket": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:deletevectorbucketpolicy": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:deletevectors": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:getindex": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:getvectorbucket": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:getvectorbucketpolicy": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:getvectors": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:listindexes": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:listtagsforresource": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:listvectors": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:putvectorbucketpolicy": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:putvectors": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:queryvectors": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:tagresource": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "s3vectors:untagresource": [
      "arn:${Partition}:s3vectors:${Region}:${Account}:bucket/.*"
    ],
    "sagemaker-geospatial:deleteearthobservationjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/.*"
    ],
    "sagemaker-geospatial:deletevectorenrichmentjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:vector-enrichment-job/.*"
    ],
    "sagemaker-geospatial:exportearthobservationjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/.*"
    ],
    "sagemaker-geospatial:exportvectorenrichmentjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:vector-enrichment-job/.*"
    ],
    "sagemaker-geospatial:getearthobservationjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/.*"
    ],
    "sagemaker-geospatial:getrasterdatacollection": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:raster-data-collection/.*"
    ],
    "sagemaker-geospatial:gettile": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/.*"
    ],
    "sagemaker-geospatial:getvectorenrichmentjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:vector-enrichment-job/.*"
    ],
    "sagemaker-geospatial:listtagsforresource": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/.*",
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:raster-data-collection/.*",
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:vector-enrichment-job/.*"
    ],
    "sagemaker-geospatial:startearthobservationjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/.*"
    ],
    "sagemaker-geospatial:startvectorenrichmentjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:vector-enrichment-job/.*"
    ],
    "sagemaker-geospatial:stopearthobservationjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/.*"
    ],
    "sagemaker-geospatial:stopvectorenrichmentjob": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:vector-enrichment-job/.*"
    ],
    "sagemaker-geospatial:tagresource": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/.*",
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:raster-data-collection/.*",
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:vector-enrichment-job/.*"
    ],
    "sagemaker-geospatial:untagresource": [
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:earth-observation-job/.*",
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:raster-data-collection/.*",
      "arn:${Partition}:sagemaker-geospatial:${Region}:${Account}:vector-enrichment-job/.*"
    ],
    "sagemaker-mlflow:createexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:createmodelversion": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:createregisteredmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:createrun": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deleteexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deleteloggedmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deleteloggedmodeltag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deletemodelversion": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deletemodelversiontag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deleteregisteredmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deleteregisteredmodelalias": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deleteregisteredmodeltag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deleterun": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deletetag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deletetraces": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:deletetracetag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:endtrace": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:finalizeloggedmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getdownloaduriformodelversionartifacts": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getexperimentbyname": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getlatestmodelversions": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getloggedmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getmetrichistory": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getmodelversion": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getmodelversionbyalias": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getregisteredmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:getrun": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:gettraceinfo": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:listartifacts": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:listloggedmodelartifacts": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:logbatch": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:loginputs": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:logloggedmodelparams": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:logmetric": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:logmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:logoutputs": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:logparam": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:renameregisteredmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:restoreexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:restorerun": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:searchexperiments": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:searchloggedmodels": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:searchmodelversions": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:searchregisteredmodels": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:searchruns": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:searchtraces": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:setexperimenttag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:setloggedmodeltags": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:setmodelversiontag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:setregisteredmodelalias": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:setregisteredmodeltag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:settag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:settracetag": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:starttrace": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:transitionmodelversionstage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:updateexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:updatemodelversion": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:updateregisteredmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker-mlflow:updaterun": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker:accessmodelpackage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*"
    ],
    "sagemaker:addassociation": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:action/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:artifact/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:context/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*"
    ],
    "sagemaker:addtags": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:action/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:algorithm/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:app/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:artifact/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:context/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:data-quality-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:domain/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-packaging-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:human-task-ui/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:labeling-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-bias-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-explainability-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-quality-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:project/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:space/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:studio-lifecycle-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:workteam/.*"
    ],
    "sagemaker:associatetrialcomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*"
    ],
    "sagemaker:attachclusternodevolume": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:batchaddclusternodes": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:batchdeleteclusternodes": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:batchdescribemodelpackage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*"
    ],
    "sagemaker:batchgetmetrics": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*"
    ],
    "sagemaker:batchgetrecord": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:batchputmetrics": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*"
    ],
    "sagemaker:batchrebootclusternodes": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:batchreplaceclusternodes": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:batchwriterecord": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:callmlflowappapi": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/.*"
    ],
    "sagemaker:callpartnerappapi": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/.*"
    ],
    "sagemaker:completerollout": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*"
    ],
    "sagemaker:createaction": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:action/.*"
    ],
    "sagemaker:createaibenchmarkjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/.*"
    ],
    "sagemaker:createairecommendationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/.*"
    ],
    "sagemaker:createaiworkloadconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/.*"
    ],
    "sagemaker:createalgorithm": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:algorithm/.*"
    ],
    "sagemaker:createapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:app/.*"
    ],
    "sagemaker:createappimageconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/.*"
    ],
    "sagemaker:createartifact": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:artifact/.*"
    ],
    "sagemaker:createautomljob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/.*"
    ],
    "sagemaker:createautomljobv2": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/.*"
    ],
    "sagemaker:createcluster": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/.*"
    ],
    "sagemaker:createclusterschedulerconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/.*"
    ],
    "sagemaker:createcoderepository": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/.*"
    ],
    "sagemaker:createcompilationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/.*"
    ],
    "sagemaker:createcomputequota": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/.*"
    ],
    "sagemaker:createcontext": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:context/.*"
    ],
    "sagemaker:createdataqualityjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:data-quality-job-definition/.*"
    ],
    "sagemaker:createdevicefleet": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:createdomain": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:domain/.*"
    ],
    "sagemaker:createedgedeploymentplan": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*"
    ],
    "sagemaker:createedgedeploymentstage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*"
    ],
    "sagemaker:createedgepackagingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-packaging-job/.*"
    ],
    "sagemaker:createendpoint": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/.*"
    ],
    "sagemaker:createendpointconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/.*"
    ],
    "sagemaker:createexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*"
    ],
    "sagemaker:createfeaturegroup": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:createflowdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/.*"
    ],
    "sagemaker:createhub": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*"
    ],
    "sagemaker:createhubcontentpresignedurls": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:createhubcontentreference": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:createhumantaskui": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:human-task-ui/.*"
    ],
    "sagemaker:createhyperparametertuningjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/.*"
    ],
    "sagemaker:createimage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*"
    ],
    "sagemaker:createimageversion": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*"
    ],
    "sagemaker:createinferencecomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*"
    ],
    "sagemaker:createinferenceexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-experiment/.*"
    ],
    "sagemaker:createinferencerecommendationsjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/.*"
    ],
    "sagemaker:createjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*"
    ],
    "sagemaker:createlabelingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:labeling-job/.*"
    ],
    "sagemaker:createmlflowapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/.*"
    ],
    "sagemaker:createmlflowtrackingserver": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker:createmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model/.*"
    ],
    "sagemaker:createmodelbiasjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-bias-job-definition/.*"
    ],
    "sagemaker:createmodelcard": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*"
    ],
    "sagemaker:createmodelcardexportjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*"
    ],
    "sagemaker:createmodelexplainabilityjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-explainability-job-definition/.*"
    ],
    "sagemaker:createmodelpackage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*"
    ],
    "sagemaker:createmodelpackagegroup": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/.*"
    ],
    "sagemaker:createmodelqualityjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-quality-job-definition/.*"
    ],
    "sagemaker:createmonitoringschedule": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*"
    ],
    "sagemaker:createnotebookinstance": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*"
    ],
    "sagemaker:createnotebookinstancelifecycleconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/.*"
    ],
    "sagemaker:createoptimizationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/.*"
    ],
    "sagemaker:createpartnerapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/.*"
    ],
    "sagemaker:createpartnerapppresignedurl": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/.*"
    ],
    "sagemaker:createpipeline": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:createpresigneddomainurl": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/.*"
    ],
    "sagemaker:createpresignedmlflowappurl": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/.*"
    ],
    "sagemaker:createpresignedmlflowtrackingserverurl": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker:createpresignednotebookinstanceurl": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*"
    ],
    "sagemaker:createprocessingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/.*"
    ],
    "sagemaker:createproject": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:project/.*"
    ],
    "sagemaker:createreservedcapacity": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/.*"
    ],
    "sagemaker:createsharedmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:shared-model/.*"
    ],
    "sagemaker:createspace": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:space/.*"
    ],
    "sagemaker:createstudiolifecycleconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:studio-lifecycle-config/.*"
    ],
    "sagemaker:createtrainingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/.*"
    ],
    "sagemaker:createtrainingplan": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/.*"
    ],
    "sagemaker:createtransformjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/.*"
    ],
    "sagemaker:createtrial": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/.*"
    ],
    "sagemaker:createtrialcomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*"
    ],
    "sagemaker:createuserprofile": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/.*"
    ],
    "sagemaker:createworkforce": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workforce/.*"
    ],
    "sagemaker:createworkteam": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workteam/.*"
    ],
    "sagemaker:deleteaction": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:action/.*"
    ],
    "sagemaker:deleteaibenchmarkjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/.*"
    ],
    "sagemaker:deleteairecommendationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/.*"
    ],
    "sagemaker:deleteaiworkloadconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/.*"
    ],
    "sagemaker:deletealgorithm": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:algorithm/.*"
    ],
    "sagemaker:deleteapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:app/.*"
    ],
    "sagemaker:deleteappimageconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/.*"
    ],
    "sagemaker:deleteartifact": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:artifact/.*"
    ],
    "sagemaker:deleteassociation": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:action/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:artifact/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:context/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*"
    ],
    "sagemaker:deletecluster": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:deleteclusterschedulerconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/.*"
    ],
    "sagemaker:deletecoderepository": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/.*"
    ],
    "sagemaker:deletecompilationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/.*"
    ],
    "sagemaker:deletecomputequota": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/.*"
    ],
    "sagemaker:deletecontext": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:context/.*"
    ],
    "sagemaker:deletedataqualityjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:data-quality-job-definition/.*"
    ],
    "sagemaker:deletedevicefleet": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:deletedomain": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:domain/.*"
    ],
    "sagemaker:deleteedgedeploymentplan": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*"
    ],
    "sagemaker:deleteedgedeploymentstage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*"
    ],
    "sagemaker:deleteendpoint": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*"
    ],
    "sagemaker:deleteendpointconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/.*"
    ],
    "sagemaker:deleteexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*"
    ],
    "sagemaker:deletefeaturegroup": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:deleteflowdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/.*"
    ],
    "sagemaker:deletehub": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*"
    ],
    "sagemaker:deletehubcontent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:deletehubcontentreference": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:deletehumanloop": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:human-loop/.*"
    ],
    "sagemaker:deletehumantaskui": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:human-task-ui/.*"
    ],
    "sagemaker:deletehyperparametertuningjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/.*"
    ],
    "sagemaker:deleteimage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*"
    ],
    "sagemaker:deleteimageversion": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image-version/.*"
    ],
    "sagemaker:deleteinferencecomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*"
    ],
    "sagemaker:deleteinferenceexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-experiment/.*"
    ],
    "sagemaker:deletejob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*"
    ],
    "sagemaker:deletemlflowapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/.*"
    ],
    "sagemaker:deletemlflowtrackingserver": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker:deletemodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model/.*"
    ],
    "sagemaker:deletemodelbiasjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-bias-job-definition/.*"
    ],
    "sagemaker:deletemodelcard": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*"
    ],
    "sagemaker:deletemodelexplainabilityjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-explainability-job-definition/.*"
    ],
    "sagemaker:deletemodelpackage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*"
    ],
    "sagemaker:deletemodelpackagegroup": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/.*"
    ],
    "sagemaker:deletemodelpackagegrouppolicy": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/.*"
    ],
    "sagemaker:deletemodelqualityjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-quality-job-definition/.*"
    ],
    "sagemaker:deletemonitoringschedule": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*"
    ],
    "sagemaker:deletenotebookinstance": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*"
    ],
    "sagemaker:deletenotebookinstancelifecycleconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/.*"
    ],
    "sagemaker:deleteoptimizationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/.*"
    ],
    "sagemaker:deletepartnerapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/.*"
    ],
    "sagemaker:deletepipeline": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:deleteprocessingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/.*"
    ],
    "sagemaker:deleteproject": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:project/.*"
    ],
    "sagemaker:deleterecord": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:deletespace": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:space/.*"
    ],
    "sagemaker:deletestudiolifecycleconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:studio-lifecycle-config/.*"
    ],
    "sagemaker:deletetags": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:action/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:algorithm/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:app/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:artifact/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:context/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:data-quality-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:domain/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-packaging-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:human-task-ui/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:labeling-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-bias-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-explainability-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-quality-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:project/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:space/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:studio-lifecycle-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:workteam/.*"
    ],
    "sagemaker:deletetrainingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*"
    ],
    "sagemaker:deletetrial": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/.*"
    ],
    "sagemaker:deletetrialcomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*"
    ],
    "sagemaker:deleteuserprofile": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/.*"
    ],
    "sagemaker:deleteworkforce": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workforce/.*"
    ],
    "sagemaker:deleteworkteam": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workteam/.*"
    ],
    "sagemaker:deployhubmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:deregisterdevices": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:describeaction": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:action/.*"
    ],
    "sagemaker:describeaibenchmarkjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/.*"
    ],
    "sagemaker:describeairecommendationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/.*"
    ],
    "sagemaker:describeaiworkloadconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/.*"
    ],
    "sagemaker:describealgorithm": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:algorithm/.*"
    ],
    "sagemaker:describeapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:app/.*"
    ],
    "sagemaker:describeappimageconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/.*"
    ],
    "sagemaker:describeartifact": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:artifact/.*"
    ],
    "sagemaker:describeautomljob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/.*"
    ],
    "sagemaker:describeautomljobv2": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/.*"
    ],
    "sagemaker:describecluster": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:describeclusterevent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:describeclusterinference": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:describeclusternode": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:describeclusterschedulerconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/.*"
    ],
    "sagemaker:describecoderepository": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/.*"
    ],
    "sagemaker:describecompilationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/.*"
    ],
    "sagemaker:describecomputequota": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/.*"
    ],
    "sagemaker:describecontext": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:context/.*"
    ],
    "sagemaker:describedataqualityjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:data-quality-job-definition/.*"
    ],
    "sagemaker:describedevice": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:describedevicefleet": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:describedomain": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:domain/.*"
    ],
    "sagemaker:describeedgedeploymentplan": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*"
    ],
    "sagemaker:describeedgepackagingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-packaging-job/.*"
    ],
    "sagemaker:describeendpoint": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*"
    ],
    "sagemaker:describeendpointconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/.*"
    ],
    "sagemaker:describeexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*"
    ],
    "sagemaker:describefeaturegroup": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:describefeaturemetadata": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:describeflowdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/.*"
    ],
    "sagemaker:describehub": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*"
    ],
    "sagemaker:describehubcontent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:describehumanloop": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:human-loop/.*"
    ],
    "sagemaker:describehumantaskui": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:human-task-ui/.*"
    ],
    "sagemaker:describehyperparametertuningjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/.*"
    ],
    "sagemaker:describeimage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*"
    ],
    "sagemaker:describeimageversion": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image-version/.*"
    ],
    "sagemaker:describeinferencecomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*"
    ],
    "sagemaker:describeinferenceexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-experiment/.*"
    ],
    "sagemaker:describeinferencerecommendationsjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/.*"
    ],
    "sagemaker:describejob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*"
    ],
    "sagemaker:describelabelingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:labeling-job/.*"
    ],
    "sagemaker:describemlflowapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/.*"
    ],
    "sagemaker:describemlflowtrackingserver": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker:describemodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model/.*"
    ],
    "sagemaker:describemodelbiasjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-bias-job-definition/.*"
    ],
    "sagemaker:describemodelcard": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*"
    ],
    "sagemaker:describemodelcardexportjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*"
    ],
    "sagemaker:describemodelexplainabilityjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-explainability-job-definition/.*"
    ],
    "sagemaker:describemodelpackage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*"
    ],
    "sagemaker:describemodelpackagegroup": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/.*"
    ],
    "sagemaker:describemodelqualityjobdefinition": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-quality-job-definition/.*"
    ],
    "sagemaker:describemonitoringschedule": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*"
    ],
    "sagemaker:describenotebookinstance": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*"
    ],
    "sagemaker:describenotebookinstancelifecycleconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/.*"
    ],
    "sagemaker:describeoptimizationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/.*"
    ],
    "sagemaker:describepartnerapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/.*"
    ],
    "sagemaker:describepipeline": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:describepipelinedefinitionforexecution": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:describepipelineexecution": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:describeprocessingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/.*"
    ],
    "sagemaker:describeproject": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:project/.*"
    ],
    "sagemaker:describereservedcapacity": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/.*"
    ],
    "sagemaker:describesharedmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:shared-model/.*"
    ],
    "sagemaker:describespace": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:space/.*"
    ],
    "sagemaker:describestudiolifecycleconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:studio-lifecycle-config/.*"
    ],
    "sagemaker:describesubscribedworkteam": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workteam/.*"
    ],
    "sagemaker:describetrainingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*"
    ],
    "sagemaker:describetrainingplan": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/.*"
    ],
    "sagemaker:describetrainingplanextensionhistory": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/.*"
    ],
    "sagemaker:describetransformjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/.*"
    ],
    "sagemaker:describetrial": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/.*"
    ],
    "sagemaker:describetrialcomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*"
    ],
    "sagemaker:describeuserprofile": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/.*"
    ],
    "sagemaker:describeworkforce": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workforce/.*"
    ],
    "sagemaker:describeworkteam": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workteam/.*"
    ],
    "sagemaker:detachclusternodevolume": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:disassociatetrialcomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/.*"
    ],
    "sagemaker:getdeployments": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:getdevicefleetreport": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:getdeviceregistration": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:getmodelpackagegrouppolicy": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/.*"
    ],
    "sagemaker:getrecord": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:getscalingconfigurationrecommendation": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/.*"
    ],
    "sagemaker:importhubcontent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:invokeendpoint": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*"
    ],
    "sagemaker:invokeendpointasync": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*"
    ],
    "sagemaker:invokeendpointwithresponsestream": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*"
    ],
    "sagemaker:listaliases": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:image-version/.*"
    ],
    "sagemaker:listclusterevents": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:listclusternodes": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:listhubcontents": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*"
    ],
    "sagemaker:listhubcontentversions": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:listimageversions": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*"
    ],
    "sagemaker:listlabelingjobsforworkteam": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workteam/.*"
    ],
    "sagemaker:listmodelcardexportjobs": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*"
    ],
    "sagemaker:listmodelcardversions": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*"
    ],
    "sagemaker:listmodelpackages": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*"
    ],
    "sagemaker:listpipelineexecutions": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:listpipelineexecutionsteps": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:listpipelineparametersforexecution": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:listpipelineversions": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:listrecords": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:listsharedmodelversions": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:shared-model/.*"
    ],
    "sagemaker:listtags": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:action/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:algorithm/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:app/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:artifact/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:context/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:data-quality-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:domain/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-packaging-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:human-task-ui/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:labeling-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-bias-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-explainability-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-quality-job-definition/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:project/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:space/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:studio-lifecycle-config/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:workteam/.*"
    ],
    "sagemaker:listtrainingjobsforhyperparametertuningjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/.*"
    ],
    "sagemaker:listultraserversbyreservedcapacity": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/.*"
    ],
    "sagemaker:putmodelpackagegrouppolicy": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/.*"
    ],
    "sagemaker:putrecord": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:registerdevices": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:retrypipelineexecution": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:sample": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*"
    ],
    "sagemaker:samplewithresponsestream": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*"
    ],
    "sagemaker:sendheartbeat": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:sendpipelineexecutionstepfailure": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:sendpipelineexecutionstepsuccess": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:sendsharedmodelevent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:shared-model-event/.*"
    ],
    "sagemaker:startclusterhealthcheck": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:startedgedeploymentstage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*"
    ],
    "sagemaker:starthumanloop": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/.*"
    ],
    "sagemaker:startinferenceexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-experiment/.*"
    ],
    "sagemaker:startmlflowtrackingserver": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker:startmonitoringschedule": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*"
    ],
    "sagemaker:startnotebookinstance": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*"
    ],
    "sagemaker:startpipelineexecution": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:startsession": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:space/.*"
    ],
    "sagemaker:stopaibenchmarkjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/.*"
    ],
    "sagemaker:stopairecommendationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/.*"
    ],
    "sagemaker:stopautomljob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/.*"
    ],
    "sagemaker:stopcompilationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/.*"
    ],
    "sagemaker:stopedgedeploymentstage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/.*"
    ],
    "sagemaker:stopedgepackagingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:edge-packaging-job/.*"
    ],
    "sagemaker:stophumanloop": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:human-loop/.*"
    ],
    "sagemaker:stophyperparametertuningjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/.*"
    ],
    "sagemaker:stopinferenceexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-experiment/.*"
    ],
    "sagemaker:stopinferencerecommendationsjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/.*"
    ],
    "sagemaker:stopjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*"
    ],
    "sagemaker:stoplabelingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:labeling-job/.*"
    ],
    "sagemaker:stopmlflowtrackingserver": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker:stopmonitoringschedule": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*"
    ],
    "sagemaker:stopnotebookinstance": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*"
    ],
    "sagemaker:stopoptimizationjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/.*"
    ],
    "sagemaker:stoppipelineexecution": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:stopprocessingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/.*"
    ],
    "sagemaker:stoptrainingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*"
    ],
    "sagemaker:stoptransformjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/.*"
    ],
    "sagemaker:trainhubmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:updateaction": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:action/.*"
    ],
    "sagemaker:updateappimageconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/.*"
    ],
    "sagemaker:updateartifact": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:artifact/.*"
    ],
    "sagemaker:updatecluster": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/.*"
    ],
    "sagemaker:updateclusterinference": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:updateclusterschedulerconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/.*"
    ],
    "sagemaker:updateclustersoftware": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:cluster/.*"
    ],
    "sagemaker:updatecoderepository": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/.*"
    ],
    "sagemaker:updatecomputequota": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/.*"
    ],
    "sagemaker:updatecontext": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:context/.*"
    ],
    "sagemaker:updatedevicefleet": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:updatedevices": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/.*"
    ],
    "sagemaker:updatedomain": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:domain/.*"
    ],
    "sagemaker:updateendpoint": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/.*"
    ],
    "sagemaker:updateendpointweightsandcapacities": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/.*"
    ],
    "sagemaker:updateexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment/.*"
    ],
    "sagemaker:updatefeaturegroup": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:updatefeaturemetadata": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/.*"
    ],
    "sagemaker:updatehub": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*"
    ],
    "sagemaker:updatehubcontent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:updatehubcontentreference": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub/.*",
      "arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/.*"
    ],
    "sagemaker:updateimage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image/.*"
    ],
    "sagemaker:updateimageversion": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:image-version/.*"
    ],
    "sagemaker:updateinferencecomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*"
    ],
    "sagemaker:updateinferencecomponentruntimeconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/.*"
    ],
    "sagemaker:updateinferenceexperiment": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:inference-experiment/.*"
    ],
    "sagemaker:updatemlflowapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/.*"
    ],
    "sagemaker:updatemlflowtrackingserver": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/.*"
    ],
    "sagemaker:updatemodelcard": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-card/.*"
    ],
    "sagemaker:updatemodelpackage": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/.*"
    ],
    "sagemaker:updatemonitoringalert": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*"
    ],
    "sagemaker:updatemonitoringschedule": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/.*"
    ],
    "sagemaker:updatenotebookinstance": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/.*"
    ],
    "sagemaker:updatenotebookinstancelifecycleconfig": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/.*"
    ],
    "sagemaker:updatepartnerapp": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/.*"
    ],
    "sagemaker:updatepipeline": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:updatepipelineexecution": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:updatepipelineversion": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/.*"
    ],
    "sagemaker:updateproject": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:project/.*"
    ],
    "sagemaker:updatereward": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:job/.*"
    ],
    "sagemaker:updatesharedmodel": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:shared-model/.*"
    ],
    "sagemaker:updatespace": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:space/.*"
    ],
    "sagemaker:updatetrainingjob": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:training-job/.*"
    ],
    "sagemaker:updatetrial": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/.*"
    ],
    "sagemaker:updatetrialcomponent": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/.*"
    ],
    "sagemaker:updateuserprofile": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/.*"
    ],
    "sagemaker:updateworkforce": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workforce/.*"
    ],
    "sagemaker:updateworkteam": [
      "arn:${Partition}:sagemaker:${Region}:${Account}:workteam/.*"
    ],
    "savingsplans:deletequeuedsavingsplan": [
      "arn:${Partition}:savingsplans::${Account}:savingsplan/.*"
    ],
    "savingsplans:describesavingsplanrates": [
      "arn:${Partition}:savingsplans::${Account}:savingsplan/.*"
    ],
    "savingsplans:describesavingsplans": [
      "arn:${Partition}:savingsplans::${Account}:savingsplan/.*"
    ],
    "savingsplans:listtagsforresource": [
      "arn:${Partition}:savingsplans::${Account}:savingsplan/.*"
    ],
    "savingsplans:returnsavingsplan": [
      "arn:${Partition}:savingsplans::${Account}:savingsplan/.*"
    ],
    "savingsplans:tagresource": [
      "arn:${Partition}:savingsplans::${Account}:savingsplan/.*"
    ],
    "savingsplans:untagresource": [
      "arn:${Partition}:savingsplans::${Account}:savingsplan/.*"
    ],
    "scheduler:createschedule": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule/.*"
    ],
    "scheduler:createschedulegroup": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule-group/.*"
    ],
    "scheduler:deleteschedule": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule/.*"
    ],
    "scheduler:deleteschedulegroup": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule-group/.*"
    ],
    "scheduler:getschedule": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule/.*"
    ],
    "scheduler:getschedulegroup": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule-group/.*"
    ],
    "scheduler:listtagsforresource": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule-group/.*"
    ],
    "scheduler:tagresource": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule-group/.*"
    ],
    "scheduler:untagresource": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule-group/.*"
    ],
    "scheduler:updateschedule": [
      "arn:${Partition}:scheduler:${Region}:${Account}:schedule/.*"
    ],
    "schemas:createregistry": [
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*"
    ],
    "schemas:createschema": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:deletediscoverer": [
      "arn:${Partition}:schemas:${Region}:${Account}:discoverer/.*"
    ],
    "schemas:deleteregistry": [
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*"
    ],
    "schemas:deleteresourcepolicy": [
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*"
    ],
    "schemas:deleteschema": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:deleteschemaversion": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:describecodebinding": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:describediscoverer": [
      "arn:${Partition}:schemas:${Region}:${Account}:discoverer/.*"
    ],
    "schemas:describeregistry": [
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*"
    ],
    "schemas:describeschema": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:exportschema": [
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*",
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:getcodebindingsource": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:getresourcepolicy": [
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*"
    ],
    "schemas:listdiscoverers": [
      "arn:${Partition}:schemas:${Region}:${Account}:discoverer/.*"
    ],
    "schemas:listregistries": [
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*"
    ],
    "schemas:listschemas": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:listschemaversions": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:listtagsforresource": [
      "arn:${Partition}:schemas:${Region}:${Account}:discoverer/.*",
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*",
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:putcodebinding": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:putresourcepolicy": [
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*"
    ],
    "schemas:searchschemas": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:startdiscoverer": [
      "arn:${Partition}:schemas:${Region}:${Account}:discoverer/.*"
    ],
    "schemas:stopdiscoverer": [
      "arn:${Partition}:schemas:${Region}:${Account}:discoverer/.*"
    ],
    "schemas:tagresource": [
      "arn:${Partition}:schemas:${Region}:${Account}:discoverer/.*",
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*",
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:untagresource": [
      "arn:${Partition}:schemas:${Region}:${Account}:discoverer/.*",
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*",
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "schemas:updatediscoverer": [
      "arn:${Partition}:schemas:${Region}:${Account}:discoverer/.*"
    ],
    "schemas:updateregistry": [
      "arn:${Partition}:schemas:${Region}:${Account}:registry/.*"
    ],
    "schemas:updateschema": [
      "arn:${Partition}:schemas:${Region}:${Account}:schema/.*"
    ],
    "scn:assignadminpermissionstouser": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:createbillofmaterialsimportjob": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:createdataintegrationflow": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:createdatalakedataset": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:createdatalakenamespace": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:createinstance": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:createssoapplication": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:deletedataintegrationflow": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:deletedatalakedataset": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:deletedatalakenamespace": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:deleteinstance": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:deletessoapplication": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:describeinstance": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:getbillofmaterialsimportjob": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:getdataintegrationevent": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:getdataintegrationflow": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:getdataintegrationflowexecution": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:getdatalakedataset": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:getdatalakenamespace": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:getinstance": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:listadminusers": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:listdataintegrationevents": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:listdataintegrationflowexecutions": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:listdataintegrationflows": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:listdatalakedatasets": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:listdatalakenamespaces": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:listinstances": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:listtagsforresource": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:removeadminpermissionsforuser": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:senddataintegrationevent": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:tagresource": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:untagresource": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:updatedataintegrationflow": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:updatedatalakedataset": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:updatedatalakenamespace": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "scn:updateinstance": [
      "arn:${Partition}:scn:${Region}:${Account}:instance/.*"
    ],
    "sdb:batchdeleteattributes": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:batchputattributes": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:createdomain": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:deleteattributes": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:deletedomain": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:domainmetadata": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:getattributes": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:getexport": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:listexports": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:putattributes": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:select": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "sdb:startdomainexport": [
      "arn:${Partition}:sdb:${Region}:${Account}:domain/.*"
    ],
    "secretsmanager:cancelrotatesecret": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:createsecret": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:deleteresourcepolicy": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:deletesecret": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:describesecret": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:getresourcepolicy": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:getsecretvalue": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:listsecretversionids": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:putresourcepolicy": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:putsecretvalue": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:removeregionsfromreplication": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:replicatesecrettoregions": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:restoresecret": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:rotatesecret": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:stopreplicationtoreplica": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:tagresource": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:untagresource": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:updatesecret": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:updatesecretversionstage": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "secretsmanager:validateresourcepolicy": [
      "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:.*"
    ],
    "security-ir:batchgetmemberaccountdetails": [
      "arn:${Partition}:security-ir:${Region}:${Account}:membership/.*"
    ],
    "security-ir:cancelmembership": [
      "arn:${Partition}:security-ir:${Region}:${Account}:membership/.*"
    ],
    "security-ir:closecase": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:createcase": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:createcasecomment": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:createmembership": [
      "arn:${Partition}:security-ir:${Region}:${Account}:membership/.*"
    ],
    "security-ir:getcase": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:getcaseattachmentdownloadurl": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:getcaseattachmentuploadurl": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:getmembership": [
      "arn:${Partition}:security-ir:${Region}:${Account}:membership/.*"
    ],
    "security-ir:listcaseedits": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:listcomments": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:listinvestigations": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:listtagsforresource": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*",
      "arn:${Partition}:security-ir:${Region}:${Account}:membership/.*"
    ],
    "security-ir:sendfeedback": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:tagresource": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*",
      "arn:${Partition}:security-ir:${Region}:${Account}:membership/.*"
    ],
    "security-ir:untagresource": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*",
      "arn:${Partition}:security-ir:${Region}:${Account}:membership/.*"
    ],
    "security-ir:updatecase": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:updatecasecomment": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:updatecasestatus": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "security-ir:updatemembership": [
      "arn:${Partition}:security-ir:${Region}:${Account}:membership/.*"
    ],
    "security-ir:updateresolvertype": [
      "arn:${Partition}:security-ir:${Region}:${Account}:case/.*"
    ],
    "securityagent:addartifact": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchcreatesecurityrequirements": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:batchdeletecodereviews": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchdeletepentests": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchdeletesecurityrequirements": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:batchdeletethreatmodels": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchdeletethreats": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetagentspaces": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetartifactmetadata": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetcodereviewjobs": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetcodereviewjobtasks": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetcodereviews": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetfindings": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetpentestjobcontentmetadata": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetpentestjobs": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetpentestjobtasks": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetpentests": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetsecurityrequirements": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:batchgettargetdomains": [
      "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/.*"
    ],
    "securityagent:batchgetthreatmodeljobs": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetthreatmodeljobtasks": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetthreatmodels": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchgetthreats": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:batchupdatesecurityrequirements": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:createcodereview": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:createdesignreview": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:createmembership": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:createonetimeloginsession": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:createpentest": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:createsecurityrequirement": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:createthreat": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:createthreatmodel": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:deleteagentspace": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:deleteapplication": [
      "arn:${Partition}:securityagent:${Region}:${Account}:application/.*"
    ],
    "securityagent:deleteartifact": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:deletedesignreview": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:deleteintegration": [
      "arn:${Partition}:securityagent:${Region}:${Account}:integration/.*"
    ],
    "securityagent:deletemembership": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:deleteprivateconnection": [
      "arn:${Partition}:securityagent:${Region}:${Account}:private-connection/.*"
    ],
    "securityagent:deletesecurityrequirement": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:deletesecurityrequirementpack": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:deletetargetdomain": [
      "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/.*"
    ],
    "securityagent:describeprivateconnection": [
      "arn:${Partition}:securityagent:${Region}:${Account}:private-connection/.*"
    ],
    "securityagent:getapplication": [
      "arn:${Partition}:securityagent:${Region}:${Account}:application/.*"
    ],
    "securityagent:getartifact": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:getdesignreview": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:getdesignreviewartifact": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:getdesignreviewfeedback": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:getintegration": [
      "arn:${Partition}:securityagent:${Region}:${Account}:integration/.*"
    ],
    "securityagent:getsecurityrequirement": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:getsecurityrequirementpack": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:importsecurityrequirements": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:listartifacts": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listcodereviewjobsforcodereview": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listcodereviewjobtasks": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listcodereviews": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listdesignreviewcomments": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listdesignreviews": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listdiscoveredendpoints": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listfindings": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listintegratedresources": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listmemberships": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listpentestjobsforpentest": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listpentestjobtasks": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listpentests": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listresourcesfromintegration": [
      "arn:${Partition}:securityagent:${Region}:${Account}:integration/.*"
    ],
    "securityagent:listsecurityrequirements": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:listtagsforresource": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:application/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:integration/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:private-connection/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/.*"
    ],
    "securityagent:listthreatmodeljobs": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listthreatmodeljobtasks": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listthreatmodels": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:listthreats": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:putdesignreviewfeedback": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:startcoderemediation": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:startcodereviewjob": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:startpentestjob": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:startthreatmodeljob": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:stopcodereviewjob": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:stoppentestjob": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:stopthreatmodeljob": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:tagresource": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:application/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:integration/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:private-connection/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/.*"
    ],
    "securityagent:togglemanagedsecurityrequirement": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:untagresource": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:application/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:integration/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:private-connection/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/.*"
    ],
    "securityagent:updateagentspace": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:updateapplication": [
      "arn:${Partition}:securityagent:${Region}:${Account}:application/.*"
    ],
    "securityagent:updatecodereview": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:updatefinding": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:updateintegratedresources": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*",
      "arn:${Partition}:securityagent:${Region}:${Account}:integration/.*"
    ],
    "securityagent:updatepentest": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:updateprivateconnectioncertificate": [
      "arn:${Partition}:securityagent:${Region}:${Account}:private-connection/.*"
    ],
    "securityagent:updatesecurityrequirement": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:updatesecurityrequirementpack": [
      "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/.*"
    ],
    "securityagent:updatetargetdomain": [
      "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/.*"
    ],
    "securityagent:updatethreat": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:updatethreatmodel": [
      "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/.*"
    ],
    "securityagent:verifytargetdomain": [
      "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/.*"
    ],
    "securityhub:acceptadministratorinvitation": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:acceptinvitation": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default",
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:batchdeleteautomationrules": [
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/.*"
    ],
    "securityhub:batchdisablestandards": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:batchenablestandards": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:batchgetautomationrules": [
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/.*"
    ],
    "securityhub:batchgetcontrolevaluations": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:batchgetenabledregionsv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:batchimportfindings": [
      "arn:${Partition}:securityhub:${Region}:${Account}:product/.*"
    ],
    "securityhub:batchupdateautomationrules": [
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/.*"
    ],
    "securityhub:batchupdatefindings": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default",
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:createactiontarget": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:createinsight": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:createmembers": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:createticketv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/.*"
    ],
    "securityhub:declineinvitations": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:deleteactiontarget": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:deleteaggregatorv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/.*"
    ],
    "securityhub:deleteautomationrulev2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/.*"
    ],
    "securityhub:deleteconfigurationpolicy": [
      "arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/.*"
    ],
    "securityhub:deleteconnector": [
      "arn:${Partition}:securityhub:${Region}:${Account}:connector/.*"
    ],
    "securityhub:deleteconnectorv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/.*"
    ],
    "securityhub:deletefindingaggregator": [
      "arn:${Partition}:securityhub:${Region}:${Account}:finding-aggregator/.*"
    ],
    "securityhub:deleteinsight": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:deleteinvitations": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:deletemembers": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:describeactiontargets": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:describehub": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:describeorganizationconfiguration": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:describeproducts": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:describeproductsv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:describestandards": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:describestandardscontrols": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:disableimportfindingsforproduct": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:disableorganizationadminaccount": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:disablesecurityhub": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:disablesecurityhubfeaturev2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:disassociatefromadministratoraccount": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:disassociatefrommasteraccount": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:disassociatemembers": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:enableimportfindingsforproduct": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:enableorganizationadminaccount": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:enablesecurityhub": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:enablesecurityhubfeaturev2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:generaterecommendedpolicyv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:getadhocinsightresults": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default",
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:getadministratoraccount": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getaggregatorv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/.*"
    ],
    "securityhub:getautomationrulev2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/.*"
    ],
    "securityhub:getconfigurationpolicy": [
      "arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/.*"
    ],
    "securityhub:getconnector": [
      "arn:${Partition}:securityhub:${Region}:${Account}:connector/.*"
    ],
    "securityhub:getconnectorv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/.*"
    ],
    "securityhub:getcontrolfindingsummary": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getcoveragestatisticsv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:getenabledstandards": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getfindingaggregator": [
      "arn:${Partition}:securityhub:${Region}:${Account}:finding-aggregator/.*"
    ],
    "securityhub:getfindinghistory": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getfindings": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default",
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:getfindingstrendsv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:getfreetrialenddate": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getfreetrialusage": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getinsightfindingtrend": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getinsightresults": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getinsights": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getinvitationscount": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getmasteraccount": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getmembers": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getrecommendedpolicyv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:getresourcesstatisticsv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:getresourcestrendsv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:getresourcesv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:getusage": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:getusagev2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:invitemembers": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:listaccountusagev2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:listcontrolevaluationsummaries": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:listenabledproductsforimport": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:listfreetrialstatusesv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:listinvitations": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:listmembers": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:listorganizationadminaccounts": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:listtagsforresource": [
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:sendfindingevents": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:sendinsightevents": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:startconfigurationpolicyassociation": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:startconfigurationpolicydisassociation": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:tagresource": [
      "arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:connector/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default",
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:untagresource": [
      "arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:connector/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/.*",
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default",
      "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/.*"
    ],
    "securityhub:updateactiontarget": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:updateaggregatorv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/.*"
    ],
    "securityhub:updateautomationrulev2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/.*"
    ],
    "securityhub:updateconfigurationpolicy": [
      "arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/.*"
    ],
    "securityhub:updateconnector": [
      "arn:${Partition}:securityhub:${Region}:${Account}:connector/.*"
    ],
    "securityhub:updateconnectorv2": [
      "arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/.*"
    ],
    "securityhub:updatefindingaggregator": [
      "arn:${Partition}:securityhub:${Region}:${Account}:finding-aggregator/.*"
    ],
    "securityhub:updatefindings": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:updateinsight": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:updateorganizationconfiguration": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:updatesecurityhubconfiguration": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securityhub:updatestandardscontrol": [
      "arn:${Partition}:securityhub:${Region}:${Account}:hub/default"
    ],
    "securitylake:createawslogsource": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:createcustomlogsource": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:createdatalake": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:createdatalakeorganizationconfiguration": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:createsubscribernotification": [
      "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/.*"
    ],
    "securitylake:deleteawslogsource": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:deletecustomlogsource": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:deletedatalake": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:deletedatalakeorganizationconfiguration": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:deletesubscriber": [
      "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/.*"
    ],
    "securitylake:deletesubscribernotification": [
      "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/.*"
    ],
    "securitylake:getdatalakeorganizationconfiguration": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:getdatalakesources": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:getsubscriber": [
      "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/.*"
    ],
    "securitylake:listtagsforresource": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default",
      "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/.*"
    ],
    "securitylake:tagresource": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default",
      "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/.*"
    ],
    "securitylake:untagresource": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default",
      "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/.*"
    ],
    "securitylake:updatedatalake": [
      "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default"
    ],
    "securitylake:updatesubscriber": [
      "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/.*"
    ],
    "securitylake:updatesubscribernotification": [
      "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/.*"
    ],
    "serverlessrepo:createapplicationversion": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:createcloudformationchangeset": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:createcloudformationtemplate": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:deleteapplication": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:getapplication": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:getapplicationpolicy": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:getcloudformationtemplate": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:listapplicationdependencies": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:listapplicationversions": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:putapplicationpolicy": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:unshareapplication": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "serverlessrepo:updateapplication": [
      "arn:${Partition}:serverlessrepo:${Region}:${Account}:applications/.*"
    ],
    "servicecatalog:acceptportfolioshare": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:associateattributegroup": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*",
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:associateprincipalwithportfolio": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:associateresource": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:associateserviceactionwithprovisioningartifact": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:associatetagoptionwithresource": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*",
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:createapplication": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:createattributegroup": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:createconstraint": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:createportfolio": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:createportfolioshare": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:createproduct": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:createprovisioningartifact": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:deleteapplication": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:deleteattributegroup": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:deleteportfolio": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:deleteportfolioshare": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:deleteproduct": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:deleteprovisioningartifact": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:deleteresourcepolicy": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*",
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:describeportfolio": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:describeportfolioshares": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:describeproduct": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:describeproductasadmin": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:describeprovisioningartifact": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:describeprovisioningparameters": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:disassociateattributegroup": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*",
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:disassociateprincipalfromportfolio": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:disassociateresource": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:disassociateserviceactionfromprovisioningartifact": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:disassociatetagoptionfromresource": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*",
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:getapplication": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:getassociatedresource": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:getattributegroup": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:getresourcepolicy": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*",
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:importasprovisionedproduct": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:listassociatedattributegroups": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:listassociatedresources": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:listattributegroupsforapplication": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:listlaunchpaths": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:listportfolioaccess": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:listportfoliosforproduct": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:listprincipalsforportfolio": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:listprovisioningartifacts": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:listserviceactionsforprovisioningartifact": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:listtagsforresource": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*",
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:provisionproduct": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:putresourcepolicy": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*",
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:rejectportfolioshare": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:tagresource": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*",
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:untagresource": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*",
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:updateapplication": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/applications/.*"
    ],
    "servicecatalog:updateattributegroup": [
      "arn:${Partition}:servicecatalog:${Region}:${Account}:/attribute-groups/.*"
    ],
    "servicecatalog:updateportfolio": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:updateportfolioshare": [
      "arn:${Partition}:catalog:${Region}:${Account}:portfolio/.*"
    ],
    "servicecatalog:updateproduct": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicecatalog:updateprovisioningartifact": [
      "arn:${Partition}:catalog:${Region}:${Account}:product/.*"
    ],
    "servicediscovery:createservice": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:deletenamespace": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*"
    ],
    "servicediscovery:deleteresourcepolicy": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*"
    ],
    "servicediscovery:deleteservice": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:deleteserviceattributes": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:deregisterinstance": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:discoverinstances": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:discoverinstancesrevision": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:getinstance": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:getinstanceshealthstatus": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:getnamespace": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*"
    ],
    "servicediscovery:getoperation": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*",
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:getresourcepolicy": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*"
    ],
    "servicediscovery:getservice": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:getserviceattributes": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:listinstances": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:putresourcepolicy": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*"
    ],
    "servicediscovery:registerinstance": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:updatehttpnamespace": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*"
    ],
    "servicediscovery:updateinstancecustomhealthstatus": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:updateprivatednsnamespace": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*"
    ],
    "servicediscovery:updatepublicdnsnamespace": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:namespace/.*"
    ],
    "servicediscovery:updateservice": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicediscovery:updateserviceattributes": [
      "arn:${Partition}:servicediscovery:${Region}:${Account}:service/.*"
    ],
    "servicequotas:getservicequota": [
      "arn:${Partition}:servicequotas:${Region}:${Account}:.*"
    ],
    "servicequotas:getservicequotaincreaserequestfromtemplate": [
      "arn:${Partition}:servicequotas:${Region}:${Account}:.*"
    ],
    "servicequotas:listrequestedservicequotachangehistorybyquota": [
      "arn:${Partition}:servicequotas:${Region}:${Account}:.*"
    ],
    "servicequotas:putservicequotaincreaserequestintotemplate": [
      "arn:${Partition}:servicequotas:${Region}:${Account}:.*"
    ],
    "servicequotas:requestservicequotaincrease": [
      "arn:${Partition}:servicequotas:${Region}:${Account}:.*"
    ],
    "ses:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-ingress-point/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-rule-set/.*"
    ],
    "ses:associateemailidentitycertificate": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:batchgetmetricdata": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:cancelexportjob": [
      "arn:${Partition}:ses:${Region}:${Account}:export-job/.*"
    ],
    "ses:createaddoninstance": [
      "arn:${Partition}:ses:${Region}:${Account}:addon-instance/.*"
    ],
    "ses:createaddonsubscription": [
      "arn:${Partition}:ses:${Region}:${Account}:addon-subscription/.*"
    ],
    "ses:createaddresslist": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:createaddresslistimportjob": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:createarchive": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:createconfigurationset": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:createconfigurationseteventdestination": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:createcontact": [
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*"
    ],
    "ses:createcontactlist": [
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*"
    ],
    "ses:createcustomverificationemailtemplate": [
      "arn:${Partition}:ses:${Region}:${Account}:custom-verification-email-template/.*"
    ],
    "ses:creatededicatedippool": [
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*"
    ],
    "ses:createdeliverabilitytestreport": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:createemailidentity": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:createemailidentitypolicy": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:createemailtemplate": [
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:createingresspoint": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-ingress-point/.*"
    ],
    "ses:createrelay": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-smtp-relay/.*"
    ],
    "ses:createruleset": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-rule-set/.*"
    ],
    "ses:createtenant": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:createtenantresourceassociation": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*",
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:createtrafficpolicy": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-traffic-policy/.*"
    ],
    "ses:deleteaddoninstance": [
      "arn:${Partition}:ses:${Region}:${Account}:addon-instance/.*"
    ],
    "ses:deleteaddonsubscription": [
      "arn:${Partition}:ses:${Region}:${Account}:addon-subscription/.*"
    ],
    "ses:deleteaddresslist": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:deletearchive": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:deleteconfigurationset": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:deleteconfigurationseteventdestination": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:deletecontact": [
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*"
    ],
    "ses:deletecontactlist": [
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*"
    ],
    "ses:deletecustomverificationemailtemplate": [
      "arn:${Partition}:ses:${Region}:${Account}:custom-verification-email-template/.*"
    ],
    "ses:deletededicatedippool": [
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*"
    ],
    "ses:deleteemailidentity": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:deleteemailidentitypolicy": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:deleteemailtemplate": [
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:deleteingresspoint": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-ingress-point/.*"
    ],
    "ses:deletemultiregionendpoint": [
      "arn:${Partition}:ses:${Region}:${Account}:multi-region-endpoint/.*"
    ],
    "ses:deleterelay": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-smtp-relay/.*"
    ],
    "ses:deleteruleset": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-rule-set/.*"
    ],
    "ses:deletesuppresseddestination": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:deletetenant": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:deletetenantresourceassociation": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*",
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:deletetrafficpolicy": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-traffic-policy/.*"
    ],
    "ses:deregistermemberfromaddresslist": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:disassociateemailidentitycertificate": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:getaddoninstance": [
      "arn:${Partition}:ses:${Region}:${Account}:addon-instance/.*"
    ],
    "ses:getaddonsubscription": [
      "arn:${Partition}:ses:${Region}:${Account}:addon-subscription/.*"
    ],
    "ses:getaddresslist": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:getaddresslistimportjob": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:getarchive": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:getarchiveexport": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:getarchivemessage": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:getarchivemessagecontent": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:getarchivesearch": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:getarchivesearchresults": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:getconfigurationset": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:getconfigurationseteventdestinations": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:getcontact": [
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*"
    ],
    "ses:getcontactlist": [
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*"
    ],
    "ses:getcustomverificationemailtemplate": [
      "arn:${Partition}:ses:${Region}:${Account}:custom-verification-email-template/.*"
    ],
    "ses:getdedicatedippool": [
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*"
    ],
    "ses:getdedicatedips": [
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*"
    ],
    "ses:getdeliverabilitytestreport": [
      "arn:${Partition}:ses:${Region}:${Account}:deliverability-test-report/.*"
    ],
    "ses:getdomainstatisticsreport": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:getemailidentity": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:getemailidentitypolicies": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:getemailtemplate": [
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:getexportjob": [
      "arn:${Partition}:ses:${Region}:${Account}:export-job/.*"
    ],
    "ses:getimportjob": [
      "arn:${Partition}:ses:${Region}:${Account}:import-job/.*"
    ],
    "ses:getingresspoint": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-ingress-point/.*"
    ],
    "ses:getmemberofaddresslist": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:getmultiregionendpoint": [
      "arn:${Partition}:ses:${Region}:${Account}:multi-region-endpoint/.*"
    ],
    "ses:getrelay": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-smtp-relay/.*"
    ],
    "ses:getreputationentity": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:getruleset": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-rule-set/.*"
    ],
    "ses:getsuppresseddestination": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:gettenant": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:gettrafficpolicy": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-traffic-policy/.*"
    ],
    "ses:listaddresslistimportjobs": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:listcontacts": [
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*"
    ],
    "ses:listemailidentitycertificates": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:listmembersofaddresslist": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:listrecommendations": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:listreputationentities": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:listresourcetenants": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:listsuppresseddestinations": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:listtagsforresource": [
      "arn:${Partition}:ses:${Region}:${Account}:addon-instance/.*",
      "arn:${Partition}:ses:${Region}:${Account}:addon-subscription/.*",
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*",
      "arn:${Partition}:ses:${Region}:${Account}:custom-verification-email-template/.*",
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*",
      "arn:${Partition}:ses:${Region}:${Account}:deliverability-test-report/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-ingress-point/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-rule-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-smtp-relay/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-traffic-policy/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*",
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:listtenantresources": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:putconfigurationsetarchivingoptions": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:putconfigurationsetdeliveryoptions": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*"
    ],
    "ses:putconfigurationsetreputationoptions": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:putconfigurationsetsendingoptions": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:putconfigurationsetsuppressionoptions": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:putconfigurationsettrackingoptions": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:putconfigurationsetvdmoptions": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:putdedicatedipinpool": [
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*"
    ],
    "ses:putdedicatedippoolscalingattributes": [
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*"
    ],
    "ses:putemailidentityconfigurationsetattributes": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:putemailidentitydkimattributes": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:putemailidentitydkimsigningattributes": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:putemailidentityfeedbackattributes": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:putemailidentitymailfromattributes": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:putsuppresseddestination": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:puttenantsuppressionattributes": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:registermembertoaddresslist": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:replicateemailidentitydkimsigningkey": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:sendbounce": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:sendbulkemail": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:sendbulktemplatedemail": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:sendcustomverificationemail": [
      "arn:${Partition}:ses:${Region}:${Account}:custom-verification-email-template/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:sendemail": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:sendrawemail": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:sendtemplatedemail": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:startaddresslistimportjob": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:startarchiveexport": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:startarchivesearch": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:stopaddresslistimportjob": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*"
    ],
    "ses:stoparchiveexport": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:stoparchivesearch": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:tagresource": [
      "arn:${Partition}:ses:${Region}:${Account}:addon-instance/.*",
      "arn:${Partition}:ses:${Region}:${Account}:addon-subscription/.*",
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*",
      "arn:${Partition}:ses:${Region}:${Account}:custom-verification-email-template/.*",
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*",
      "arn:${Partition}:ses:${Region}:${Account}:deliverability-test-report/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-ingress-point/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-rule-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-smtp-relay/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-traffic-policy/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*",
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:testrenderemailtemplate": [
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:untagresource": [
      "arn:${Partition}:ses:${Region}:${Account}:addon-instance/.*",
      "arn:${Partition}:ses:${Region}:${Account}:addon-subscription/.*",
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*",
      "arn:${Partition}:ses:${Region}:${Account}:custom-verification-email-template/.*",
      "arn:${Partition}:ses:${Region}:${Account}:dedicated-ip-pool/.*",
      "arn:${Partition}:ses:${Region}:${Account}:deliverability-test-report/.*",
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-address-list/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-ingress-point/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-rule-set/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-smtp-relay/.*",
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-traffic-policy/.*",
      "arn:${Partition}:ses:${Region}:${Account}:template/.*",
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:updatearchive": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-archive/.*"
    ],
    "ses:updateconfigurationset": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:updateconfigurationseteventdestination": [
      "arn:${Partition}:ses:${Region}:${Account}:configuration-set/.*"
    ],
    "ses:updatecontact": [
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*"
    ],
    "ses:updatecontactlist": [
      "arn:${Partition}:ses:${Region}:${Account}:contact-list/.*"
    ],
    "ses:updatecustomverificationemailtemplate": [
      "arn:${Partition}:ses:${Region}:${Account}:custom-verification-email-template/.*"
    ],
    "ses:updateemailidentitypolicy": [
      "arn:${Partition}:ses:${Region}:${Account}:identity/.*"
    ],
    "ses:updateemailtemplate": [
      "arn:${Partition}:ses:${Region}:${Account}:template/.*"
    ],
    "ses:updateingresspoint": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-ingress-point/.*"
    ],
    "ses:updaterelay": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-smtp-relay/.*"
    ],
    "ses:updatereputationentitycustomermanagedstatus": [
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:updatereputationentitypolicy": [
      "arn:${Partition}:ses:${Region}:aws:reputation-policy/.*",
      "arn:${Partition}:ses:${Region}:${Account}:tenant/.*"
    ],
    "ses:updateruleset": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-rule-set/.*"
    ],
    "ses:updatetrafficpolicy": [
      "arn:${Partition}:ses:${Region}:${Account}:mailmanager-traffic-policy/.*"
    ],
    "shield:associatehealthcheck": [
      "arn:${Partition}:shield::${Account}:protection/.*"
    ],
    "shield:deleteprotection": [
      "arn:${Partition}:shield::${Account}:protection/.*"
    ],
    "shield:deleteprotectiongroup": [
      "arn:${Partition}:shield::${Account}:protection-group/.*"
    ],
    "shield:describeattack": [
      "arn:${Partition}:shield::${Account}:attack/.*"
    ],
    "shield:describeattackcontributors": [
      "arn:${Partition}:shield::${Account}:attack/.*",
      "arn:${Partition}:shield::${Account}:protection-group/.*"
    ],
    "shield:describeprotection": [
      "arn:${Partition}:shield::${Account}:protection/.*"
    ],
    "shield:describeprotectiongroup": [
      "arn:${Partition}:shield::${Account}:protection-group/.*"
    ],
    "shield:disassociatehealthcheck": [
      "arn:${Partition}:shield::${Account}:protection/.*"
    ],
    "shield:listmitigations": [
      "arn:${Partition}:shield::${Account}:attack/.*"
    ],
    "shield:listresourcesinprotectiongroup": [
      "arn:${Partition}:shield::${Account}:protection-group/.*"
    ],
    "shield:listtagsforresource": [
      "arn:${Partition}:shield::${Account}:protection/.*",
      "arn:${Partition}:shield::${Account}:protection-group/.*"
    ],
    "shield:tagresource": [
      "arn:${Partition}:shield::${Account}:protection/.*",
      "arn:${Partition}:shield::${Account}:protection-group/.*"
    ],
    "shield:untagresource": [
      "arn:${Partition}:shield::${Account}:protection/.*",
      "arn:${Partition}:shield::${Account}:protection-group/.*"
    ],
    "shield:updateprotectiongroup": [
      "arn:${Partition}:shield::${Account}:protection-group/.*"
    ],
    "signer:addprofilepermission": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:cancelsigningprofile": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:describesigningjob": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-jobs/.*"
    ],
    "signer:getrevocationstatus": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-jobs/.*",
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:getsigningprofile": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:listprofilepermissions": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:listtagsforresource": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:removeprofilepermission": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:revokesignature": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-jobs/.*"
    ],
    "signer:revokesigningprofile": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:signpayload": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:startsigningjob": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:tagresource": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signer:untagresource": [
      "arn:${Partition}:signer:${Region}:${Account}:/signing-profiles/.*"
    ],
    "signin:authenticate": [
      "arn:${Partition}:signin:::console/.*"
    ],
    "signin:authorizeoauth2access": [
      "arn:${Partition}:signin:::console/.*",
      "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/localhost",
      "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/remote",
      "arn:${Partition}:signin:${Region}:${Account}:service-principal/.*"
    ],
    "signin:createaccount": [
      "arn:${Partition}:signin:::console/.*"
    ],
    "signin:createoauth2publicclient": [
      "arn:${Partition}:signin:${Region}::external-client/dcr/*"
    ],
    "signin:createoauth2token": [
      "arn:${Partition}:signin:::console/.*",
      "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/localhost",
      "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/remote",
      "arn:${Partition}:signin:${Region}:${Account}:service-principal/.*"
    ],
    "signin:introspectoauth2token": [
      "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/localhost",
      "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/remote",
      "arn:${Partition}:signin:${Region}:${Account}:service-principal/.*"
    ],
    "signin:revokeoauth2token": [
      "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/localhost",
      "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/remote",
      "arn:${Partition}:signin:${Region}:${Account}:service-principal/.*"
    ],
    "simspaceweaver:createsnapshot": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:deleteapp": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:deletesimulation": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:describeapp": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:describesimulation": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:listapps": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:startapp": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:startclock": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:stopapp": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:stopclock": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:stopsimulation": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:tagresource": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "simspaceweaver:untagresource": [
      "arn:${Partition}:simspaceweaver:${Region}:${Account}:simulation/.*"
    ],
    "sms-voice:associateoriginationidentity": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:associateprotectconfiguration": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:createeventdestination": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:createpool": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:createregistrationassociation": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:createregistrationversion": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:deleteconfigurationset": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:deletedefaultmessagetype": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:deletedefaultsenderid": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:deleteeventdestination": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:deletekeyword": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*"
    ],
    "sms-voice:deletenotifyconfiguration": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:notify-configuration/.*"
    ],
    "sms-voice:deleteoptedoutnumber": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*"
    ],
    "sms-voice:deleteoptoutlist": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*"
    ],
    "sms-voice:deletepool": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*"
    ],
    "sms-voice:deleteprotectconfiguration": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:deleteprotectconfigurationrulesetnumberoverride": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:deletercsagent": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*"
    ],
    "sms-voice:deleteregistration": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:deleteregistrationattachment": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration-attachment/.*"
    ],
    "sms-voice:deleteregistrationfieldvalue": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:deleteresourcepolicy": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:deleteverifieddestinationnumber": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:verified-destination-number/.*"
    ],
    "sms-voice:describeconfigurationsets": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:describekeywords": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*"
    ],
    "sms-voice:describenotifyconfigurations": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:notify-configuration/.*"
    ],
    "sms-voice:describeoptedoutnumbers": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*"
    ],
    "sms-voice:describeoptoutlists": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*"
    ],
    "sms-voice:describephonenumbers": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*"
    ],
    "sms-voice:describepools": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*"
    ],
    "sms-voice:describeprotectconfigurations": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:describercsagentcountrylaunchstatus": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*"
    ],
    "sms-voice:describercsagents": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*"
    ],
    "sms-voice:describeregistrationattachments": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration-attachment/.*"
    ],
    "sms-voice:describeregistrationfieldvalues": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:describeregistrations": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:describeregistrationversions": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:describesenderids": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:describeverifieddestinationnumbers": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:verified-destination-number/.*"
    ],
    "sms-voice:disassociateoriginationidentity": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:disassociateprotectconfiguration": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:discardregistrationversion": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:getprotectconfigurationcountryruleset": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:getresourcepolicy": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:listpooloriginationidentities": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*"
    ],
    "sms-voice:listprotectconfigurationrulesetnumberoverrides": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:listregistrationassociations": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:listtagsforresource": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:notify-configuration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration-attachment/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:verified-destination-number/.*"
    ],
    "sms-voice:putkeyword": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*"
    ],
    "sms-voice:putmessagefeedback": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:message/.*"
    ],
    "sms-voice:putoptedoutnumber": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*"
    ],
    "sms-voice:putprotectconfigurationrulesetnumberoverride": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:putregistrationfieldvalue": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:putresourcepolicy": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:releasephonenumber": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*"
    ],
    "sms-voice:releasesenderid": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:requestphonenumber": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:senddestinationnumberverificationcode": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:sendmediamessage": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:sendnotifytextmessage": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:notify-configuration/.*"
    ],
    "sms-voice:sendnotifyvoicemessage": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:notify-configuration/.*"
    ],
    "sms-voice:sendrcsmessage": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:sendtextmessage": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:sendvoicemessage": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*"
    ],
    "sms-voice:setaccountdefaultprotectconfiguration": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:setdefaultmessagefeedbackenabled": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:setdefaultmessagetype": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:setdefaultsenderid": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:submitregistrationversion": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*"
    ],
    "sms-voice:tagresource": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:notify-configuration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration-attachment/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:verified-destination-number/.*"
    ],
    "sms-voice:untagresource": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:notify-configuration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:registration-attachment/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:verified-destination-number/.*"
    ],
    "sms-voice:updateeventdestination": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:configuration-set/.*"
    ],
    "sms-voice:updatenotifyconfiguration": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:notify-configuration/.*"
    ],
    "sms-voice:updatephonenumber": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:phone-number/.*"
    ],
    "sms-voice:updatepool": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:opt-out-list/.*",
      "arn:${Partition}:sms-voice:${Region}:${Account}:pool/.*"
    ],
    "sms-voice:updateprotectconfiguration": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:updateprotectconfigurationcountryruleset": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:protect-configuration/.*"
    ],
    "sms-voice:updatercsagent": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:rcs-agent/.*"
    ],
    "sms-voice:updatesenderid": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:sender-id/.*"
    ],
    "sms-voice:verifydestinationnumber": [
      "arn:${Partition}:sms-voice:${Region}:${Account}:verified-destination-number/.*"
    ],
    "snow-device-management:canceltask": [
      "arn:${Partition}:snow-device-management:${Region}:${Account}:task/.*"
    ],
    "snow-device-management:describedevice": [
      "arn:${Partition}:snow-device-management:${Region}:${Account}:managed-device/.*"
    ],
    "snow-device-management:describedeviceec2instances": [
      "arn:${Partition}:snow-device-management:${Region}:${Account}:managed-device/.*"
    ],
    "snow-device-management:describetask": [
      "arn:${Partition}:snow-device-management:${Region}:${Account}:task/.*"
    ],
    "snow-device-management:listdeviceresources": [
      "arn:${Partition}:snow-device-management:${Region}:${Account}:managed-device/.*"
    ],
    "snow-device-management:tagresource": [
      "arn:${Partition}:snow-device-management:${Region}:${Account}:managed-device/.*",
      "arn:${Partition}:snow-device-management:${Region}:${Account}:task/.*"
    ],
    "snow-device-management:untagresource": [
      "arn:${Partition}:snow-device-management:${Region}:${Account}:managed-device/.*",
      "arn:${Partition}:snow-device-management:${Region}:${Account}:task/.*"
    ],
    "sns:addpermission": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:confirmsubscription": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:createtopic": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:deletetopic": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:getdataprotectionpolicy": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:getsubscriptionattributes": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:gettopicattributes": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:listsubscriptionsbytopic": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:listtagsforresource": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:publish": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:putdataprotectionpolicy": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:removepermission": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:setsubscriptionattributes": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:settopicattributes": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:subscribe": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:tagresource": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:unsubscribe": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "sns:untagresource": [
      "arn:${Partition}:sns:${Region}:${Account}:.*"
    ],
    "social-messaging:createwhatsappflow": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:createwhatsappmessagetemplate": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:createwhatsappmessagetemplatefromlibrary": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:createwhatsappmessagetemplatemedia": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:deletewhatsappflow": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:deletewhatsappmessagemedia": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:phone-number-id/.*"
    ],
    "social-messaging:deletewhatsappmessagetemplate": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:deprecatewhatsappflow": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:disassociatewhatsappbusinessaccount": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:getlinkedwhatsappbusinessaccount": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:getlinkedwhatsappbusinessaccountphonenumber": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:phone-number-id/.*"
    ],
    "social-messaging:getwhatsappflow": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:getwhatsappflowpreview": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:getwhatsappmessagemedia": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:phone-number-id/.*"
    ],
    "social-messaging:getwhatsappmessagetemplate": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:listtagsforresource": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:phone-number-id/.*",
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:listwhatsappflowassets": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:listwhatsappflows": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:listwhatsappmessagetemplates": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:listwhatsapptemplatelibrary": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:postwhatsappmessagemedia": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:phone-number-id/.*"
    ],
    "social-messaging:publishwhatsappflow": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:putwhatsappbusinessaccounteventdestinations": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:sendwhatsappmessage": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:phone-number-id/.*"
    ],
    "social-messaging:tagresource": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:phone-number-id/.*",
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:untagresource": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:phone-number-id/.*",
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:updatewhatsappflow": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:updatewhatsappflowassets": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "social-messaging:updatewhatsappmessagetemplate": [
      "arn:${Partition}:social-messaging:${Region}:${Account}:waba/.*"
    ],
    "sqlworkbench:associateconnectionwithchart": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*"
    ],
    "sqlworkbench:associateconnectionwithtab": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*"
    ],
    "sqlworkbench:associatenotebookwithtab": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:associatequerywithtab": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqlworkbench:batchgetnotebookcell": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:createchart": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/.*"
    ],
    "sqlworkbench:createconnection": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*"
    ],
    "sqlworkbench:createnotebook": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:createnotebookcell": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:createnotebookfromversion": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:createnotebookversion": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:createsavedquery": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqlworkbench:deletechart": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/.*"
    ],
    "sqlworkbench:deleteconnection": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*"
    ],
    "sqlworkbench:deletenotebook": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:deletenotebookcell": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:deletenotebookversion": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:deletesavedquery": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqlworkbench:driverexecute": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*"
    ],
    "sqlworkbench:duplicatenotebook": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:exportnotebook": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:getchart": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/.*"
    ],
    "sqlworkbench:getconnection": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*"
    ],
    "sqlworkbench:getnotebook": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:getnotebookversion": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:getsavedquery": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqlworkbench:importnotebook": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:listnotebookversions": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:listsavedqueryversions": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqlworkbench:listtagsforresource": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqlworkbench:restorenotebookversion": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:tagresource": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqlworkbench:untagresource": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqlworkbench:updatechart": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/.*"
    ],
    "sqlworkbench:updateconnection": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:connection/.*"
    ],
    "sqlworkbench:updatefilefolder": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:chart/.*",
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqlworkbench:updatenotebook": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:updatenotebookcellcontent": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:updatenotebookcelllayout": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:notebook/.*"
    ],
    "sqlworkbench:updatesavedquery": [
      "arn:${Partition}:sqlworkbench:${Region}:${Account}:query/.*"
    ],
    "sqs:addpermission": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:cancelmessagemovetask": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:changemessagevisibility": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:createqueue": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:deletemessage": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:deletequeue": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:getqueueattributes": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:getqueueurl": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:listdeadlettersourcequeues": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:listmessagemovetasks": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:listqueuetags": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:purgequeue": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:receivemessage": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:removepermission": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:sendmessage": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:setqueueattributes": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:startmessagemovetask": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:tagqueue": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "sqs:untagqueue": [
      "arn:${Partition}:sqs:${Region}:${Account}:.*"
    ],
    "ssm-contacts:acceptpage": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:page/.*"
    ],
    "ssm-contacts:activatecontactchannel": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contactchannel/.*"
    ],
    "ssm-contacts:associatecontact": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:createcontact": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:createcontactchannel": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:createrotation": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:createrotationoverride": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:deactivatecontactchannel": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contactchannel/.*"
    ],
    "ssm-contacts:deletecontact": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:deletecontactchannel": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contactchannel/.*"
    ],
    "ssm-contacts:deleterotation": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:deleterotationoverride": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:describeengagement": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:engagement/.*"
    ],
    "ssm-contacts:describepage": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:page/.*"
    ],
    "ssm-contacts:getcontact": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:getcontactchannel": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contactchannel/.*"
    ],
    "ssm-contacts:getcontactpolicy": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:getrotation": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:getrotationoverride": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:listcontactchannels": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:listpagereceipts": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:page/.*"
    ],
    "ssm-contacts:listpageresolutions": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:page/.*"
    ],
    "ssm-contacts:listpagesbycontact": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:listpagesbyengagement": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:engagement/.*"
    ],
    "ssm-contacts:listrotationoverrides": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:listrotationshifts": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:listtagsforresource": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*",
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:putcontactpolicy": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:sendactivationcode": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contactchannel/.*"
    ],
    "ssm-contacts:startengagement": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:stopengagement": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:engagement/.*"
    ],
    "ssm-contacts:tagresource": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*",
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:untagresource": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*",
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-contacts:updatecontact": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contact/.*"
    ],
    "ssm-contacts:updatecontactchannel": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:contactchannel/.*"
    ],
    "ssm-contacts:updaterotation": [
      "arn:${Partition}:ssm-contacts:${Region}:${Account}:rotation/.*"
    ],
    "ssm-incidents:batchgetincidentfindings": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:createtimelineevent": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:deleteincidentrecord": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*"
    ],
    "ssm-incidents:deletereplicationset": [
      "arn:${Partition}:ssm-incidents::${Account}:replication-set/.*"
    ],
    "ssm-incidents:deleteresourcepolicy": [
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:deleteresponseplan": [
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:deletetimelineevent": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*"
    ],
    "ssm-incidents:getincidentrecord": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:getreplicationset": [
      "arn:${Partition}:ssm-incidents::${Account}:replication-set/.*"
    ],
    "ssm-incidents:getresourcepolicies": [
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:getresponseplan": [
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:gettimelineevent": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:listincidentfindings": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:listrelateditems": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:listtagsforresource": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:replication-set/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:listtimelineevents": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:putresourcepolicy": [
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:startincident": [
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:tagresource": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:replication-set/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:untagresource": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:replication-set/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:updatedeletionprotection": [
      "arn:${Partition}:ssm-incidents::${Account}:replication-set/.*"
    ],
    "ssm-incidents:updateincidentrecord": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:updaterelateditems": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:updatereplicationset": [
      "arn:${Partition}:ssm-incidents::${Account}:replication-set/.*"
    ],
    "ssm-incidents:updateresponseplan": [
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-incidents:updatetimelineevent": [
      "arn:${Partition}:ssm-incidents::${Account}:incident-record/.*",
      "arn:${Partition}:ssm-incidents::${Account}:response-plan/.*"
    ],
    "ssm-quicksetup:createconfigurationmanager": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-quicksetup:deleteconfigurationmanager": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-quicksetup:getconfiguration": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-quicksetup:getconfigurationmanager": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-quicksetup:listconfigurations": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-quicksetup:listtagsforresource": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-quicksetup:tagresource": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-quicksetup:untagresource": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-quicksetup:updateconfigurationdefinition": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-quicksetup:updateconfigurationmanager": [
      "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/.*"
    ],
    "ssm-sap:deregisterapplication": [
      "arn:${Partition}:ssm-sap:${Region}:${Account}:.*"
    ],
    "ssm-sap:getcomponent": [
      "arn:${Partition}:ssm-sap:${Region}:${Account}:.*"
    ],
    "ssm-sap:listcomponents": [
      "arn:${Partition}:ssm-sap:${Region}:${Account}:.*"
    ],
    "ssm-sap:startapplication": [
      "arn:${Partition}:ssm-sap:${Region}:${Account}:.*"
    ],
    "ssm-sap:startapplicationrefresh": [
      "arn:${Partition}:ssm-sap:${Region}:${Account}:.*"
    ],
    "ssm-sap:stopapplication": [
      "arn:${Partition}:ssm-sap:${Region}:${Account}:.*"
    ],
    "ssm-sap:tagresource": [
      "arn:${Partition}:ssm-sap:${Region}:${Account}:.*"
    ],
    "ssm-sap:untagresource": [
      "arn:${Partition}:ssm-sap:${Region}:${Account}:.*"
    ],
    "ssm-sap:updateapplicationsettings": [
      "arn:${Partition}:ssm-sap:${Region}:${Account}:.*"
    ],
    "ssm:addtagstoresource": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:automation-execution/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:opsitem/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:opsmetadata/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*"
    ],
    "ssm:associateopsitemrelateditem": [
      "arn:${Partition}:ssm:${Region}:${Account}:opsitem/.*"
    ],
    "ssm:cancelmaintenancewindowexecution": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:createassociation": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:createassociationbatch": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:createcloudconnector": [
      "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/.*"
    ],
    "ssm:createdocument": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:createresourcedatasync": [
      "arn:${Partition}:ssm:${Region}:${Account}:resource-data-sync/.*"
    ],
    "ssm:deleteassociation": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:deletecloudconnector": [
      "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/.*"
    ],
    "ssm:deletedocument": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:deletemaintenancewindow": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:deleteopsitem": [
      "arn:${Partition}:ssm:${Region}:${Account}:opsitem/.*"
    ],
    "ssm:deleteopsmetadata": [
      "arn:${Partition}:ssm:${Region}:${Account}:opsmetadata/.*"
    ],
    "ssm:deleteparameter": [
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:deleteparameters": [
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:deletepatchbaseline": [
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*"
    ],
    "ssm:deleteresourcedatasync": [
      "arn:${Partition}:ssm:${Region}:${Account}:resource-data-sync/.*"
    ],
    "ssm:deleteresourcepolicy": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:opsitemgroup/default",
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:deregistermanagedinstance": [
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:deregisterpatchbaselineforpatchgroup": [
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*"
    ],
    "ssm:deregistertargetfrommaintenancewindow": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:windowtarget/.*"
    ],
    "ssm:deregistertaskfrommaintenancewindow": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:windowtask/.*"
    ],
    "ssm:describeassociation": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:describeassociationexecutions": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*"
    ],
    "ssm:describeassociationexecutiontargets": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*"
    ],
    "ssm:describeautomationstepexecutions": [
      "arn:${Partition}:ssm:${Region}:${Account}:automation-execution/.*"
    ],
    "ssm:describedocument": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:describedocumentparameters": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:describedocumentpermission": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:describeeffectiveinstanceassociations": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:describeeffectivepatchesforpatchbaseline": [
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*"
    ],
    "ssm:describeinstanceassociationsstatus": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:describeinstancepatches": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:describeinstancepatchstates": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:describemaintenancewindowexecutions": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:describemaintenancewindowtargets": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:describemaintenancewindowtasks": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:disassociateopsitemrelateditem": [
      "arn:${Partition}:ssm:${Region}:${Account}:opsitem/.*"
    ],
    "ssm:getaccesstoken": [
      "arn:${Partition}:ssm:${Region}:${Account}:opsitem/.*"
    ],
    "ssm:getautomationexecution": [
      "arn:${Partition}:ssm:${Region}:${Account}:automation-execution/.*"
    ],
    "ssm:getcalendar": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:getcalendarstate": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:getcloudconnector": [
      "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/.*"
    ],
    "ssm:getconnectionstatus": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*"
    ],
    "ssm:getdefaultpatchbaseline": [
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*"
    ],
    "ssm:getdocument": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:getmaintenancewindow": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:getmaintenancewindowtask": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:getopsitem": [
      "arn:${Partition}:ssm:${Region}:${Account}:opsitem/.*"
    ],
    "ssm:getopsmetadata": [
      "arn:${Partition}:ssm:${Region}:${Account}:opsmetadata/.*"
    ],
    "ssm:getopssummary": [
      "arn:${Partition}:ssm:${Region}:${Account}:resource-data-sync/.*"
    ],
    "ssm:getparameter": [
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:getparameterhistory": [
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:getparameters": [
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:getparametersbypath": [
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:getpatchbaseline": [
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*"
    ],
    "ssm:getresourcepolicies": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:opsitemgroup/default",
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:getservicesetting": [
      "arn:${Partition}:ssm:${Region}:${Account}:servicesetting/.*"
    ],
    "ssm:labelparameterversion": [
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:listassociationversions": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*"
    ],
    "ssm:listdocumentmetadatahistory": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:listdocumentversions": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:listinstanceassociations": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:listnodes": [
      "arn:${Partition}:ssm:${Region}:${Account}:resource-data-sync/.*"
    ],
    "ssm:listnodessummary": [
      "arn:${Partition}:ssm:${Region}:${Account}:resource-data-sync/.*"
    ],
    "ssm:listtagsforresource": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:automation-execution/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:opsitem/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:opsmetadata/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*"
    ],
    "ssm:modifydocumentpermission": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:putcalendar": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:putcomplianceitems": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:putparameter": [
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:putresourcepolicy": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:opsitemgroup/default",
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:registerdefaultpatchbaseline": [
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*"
    ],
    "ssm:registerpatchbaselineforpatchgroup": [
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*"
    ],
    "ssm:registertargetwithmaintenancewindow": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:registertaskwithmaintenancewindow": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:removetagsfromresource": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:automation-execution/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:opsitem/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:opsmetadata/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*"
    ],
    "ssm:requestmanagedinstanceroletoken": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:resetservicesetting": [
      "arn:${Partition}:ssm:${Region}:${Account}:servicesetting/.*"
    ],
    "ssm:resumesession": [
      "arn:${Partition}:ssm:${Region}:${Account}:session/.*"
    ],
    "ssm:sendautomationsignal": [
      "arn:${Partition}:ssm:${Region}:${Account}:automation-execution/.*"
    ],
    "ssm:sendcommand": [
      "arn:${Partition}:s3:::.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:startaccessrequest": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:startassociationsonce": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*"
    ],
    "ssm:startautomationexecution": [
      "arn:${Partition}:ssm:${Region}:${Account}:.*",
      "arn:${Partition}:ssm:${Region}:${Account}:automation-execution/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:startchangerequestexecution": [
      "arn:${Partition}:ssm:${Region}:${Account}:.*",
      "arn:${Partition}:ssm:${Region}:${Account}:automation-execution/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:startsession": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*",
      "arn:${Partition}:ecs:${Region}:${Account}:task/.*"
    ],
    "ssm:stopautomationexecution": [
      "arn:${Partition}:ssm:${Region}:${Account}:automation-execution/.*"
    ],
    "ssm:terminatesession": [
      "arn:${Partition}:ssm:${Region}:${Account}:session/.*"
    ],
    "ssm:unlabelparameterversion": [
      "arn:${Partition}:ssm:${Region}:${Account}:parameter/.*"
    ],
    "ssm:updateassociation": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:updateassociationstatus": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:updatecloudconnector": [
      "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/.*"
    ],
    "ssm:updatedocument": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:updatedocumentdefaultversion": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:updatedocumentmetadata": [
      "arn:${Partition}:ssm:${Region}:${Account}:document/.*"
    ],
    "ssm:updateinstanceassociationstatus": [
      "arn:${Partition}:ssm:${Region}:${Account}:association/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:updateinstanceinformation": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:updatemaintenancewindow": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*"
    ],
    "ssm:updatemaintenancewindowtarget": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:windowtarget/.*"
    ],
    "ssm:updatemaintenancewindowtask": [
      "arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:windowtask/.*"
    ],
    "ssm:updatemanagedinstancepublickey": [
      "arn:${Partition}:ec2:${Region}:${Account}:instance/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:updatemanagedinstancerole": [
      "arn:${Partition}:iam::${Account}:role/.*",
      "arn:${Partition}:ssm:${Region}:${Account}:managed-instance/.*"
    ],
    "ssm:updateopsitem": [
      "arn:${Partition}:ssm:${Region}:${Account}:opsitem/.*"
    ],
    "ssm:updateopsmetadata": [
      "arn:${Partition}:ssm:${Region}:${Account}:opsmetadata/.*"
    ],
    "ssm:updatepatchbaseline": [
      "arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/.*"
    ],
    "ssm:updateresourcedatasync": [
      "arn:${Partition}:ssm:${Region}:${Account}:resource-data-sync/.*"
    ],
    "ssm:updateservicesetting": [
      "arn:${Partition}:ssm:${Region}:${Account}:servicesetting/.*"
    ],
    "ssm:validatecloudconnector": [
      "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/.*"
    ],
    "sso-oauth:createtokenwithiam": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso-oauth:introspecttokenwithiam": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso-oauth:revoketokenwithiam": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:addregion": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:attachcustomermanagedpolicyreferencetopermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:attachmanagedpolicytopermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:createaccountassignment": [
      "arn:${Partition}:sso:::account/.*",
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:createapplication": [
      "arn:${Partition}:sso::${AccountId}:application/.*",
      "arn:${Partition}:sso::aws:applicationProvider/.*",
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:createapplicationassignment": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:createinstance": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:createinstanceaccesscontrolattributeconfiguration": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:createpermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:createtrustedtokenissuer": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/.*"
    ],
    "sso:deleteaccountassignment": [
      "arn:${Partition}:sso:::account/.*",
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:deleteapplication": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:deleteapplicationaccessscope": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:deleteapplicationassignment": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:deleteapplicationauthenticationmethod": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:deleteapplicationgrant": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:deleteinlinepolicyfrompermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:deleteinstance": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:deleteinstanceaccesscontrolattributeconfiguration": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:deletepermissionsboundaryfrompermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:deletepermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:deletetrustedtokenissuer": [
      "arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/.*"
    ],
    "sso:describeaccountassignmentcreationstatus": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:describeaccountassignmentdeletionstatus": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:describeapplication": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:describeapplicationassignment": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:describeapplicationprovider": [
      "arn:${Partition}:sso::aws:applicationProvider/.*"
    ],
    "sso:describeinstance": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:describeinstanceaccesscontrolattributeconfiguration": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:describepermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:describepermissionsetprovisioningstatus": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:describeregion": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:describetrustedtokenissuer": [
      "arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/.*"
    ],
    "sso:detachcustomermanagedpolicyreferencefrompermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:detachmanagedpolicyfrompermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:getapplicationaccessscope": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:getapplicationassignmentconfiguration": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:getapplicationauthenticationmethod": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:getapplicationgrant": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:getapplicationsessionconfiguration": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:getinlinepolicyforpermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:getpermissionsboundaryforpermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:listaccountassignmentcreationstatus": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:listaccountassignmentdeletionstatus": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:listaccountassignments": [
      "arn:${Partition}:sso:::account/.*",
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:listaccountassignmentsforprincipal": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:listaccountsforprovisionedpermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:listapplicationaccessscopes": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:listapplicationassignments": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:listapplicationassignmentsforprincipal": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:listapplicationauthenticationmethods": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:listapplicationgrants": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:listapplicationproviders": [
      "arn:${Partition}:sso::aws:applicationProvider/.*"
    ],
    "sso:listcustomermanagedpolicyreferencesinpermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:listmanagedpoliciesinpermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:listpermissionsetprovisioningstatus": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:listpermissionsets": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:listpermissionsetsprovisionedtoaccount": [
      "arn:${Partition}:sso:::account/.*",
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:listregions": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:listtagsforresource": [
      "arn:${Partition}:sso::${AccountId}:application/.*",
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*",
      "arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/.*"
    ],
    "sso:listtrustedtokenissuers": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:provisionpermissionset": [
      "arn:${Partition}:sso:::account/.*",
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:putapplicationaccessscope": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:putapplicationassignmentconfiguration": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:putapplicationauthenticationmethod": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:putapplicationgrant": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:putapplicationsessionconfiguration": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:putinlinepolicytopermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:putpermissionsboundarytopermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:removeregion": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:tagresource": [
      "arn:${Partition}:sso::${AccountId}:application/.*",
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*",
      "arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/.*"
    ],
    "sso:untagresource": [
      "arn:${Partition}:sso::${AccountId}:application/.*",
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*",
      "arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/.*"
    ],
    "sso:updateapplication": [
      "arn:${Partition}:sso::${AccountId}:application/.*"
    ],
    "sso:updateinstance": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:updateinstanceaccesscontrolattributeconfiguration": [
      "arn:${Partition}:sso:::instance/.*"
    ],
    "sso:updatepermissionset": [
      "arn:${Partition}:sso:::instance/.*",
      "arn:${Partition}:sso:::permissionSet/.*"
    ],
    "sso:updatetrustedtokenissuer": [
      "arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/.*"
    ],
    "states:createactivity": [
      "arn:${Partition}:states:${Region}:${Account}:activity:.*"
    ],
    "states:createstatemachine": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:createstatemachinealias": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:deleteactivity": [
      "arn:${Partition}:states:${Region}:${Account}:activity:.*"
    ],
    "states:deletestatemachine": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:deletestatemachinealias": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:deletestatemachineversion": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:describeactivity": [
      "arn:${Partition}:states:${Region}:${Account}:activity:.*"
    ],
    "states:describeexecution": [
      "arn:${Partition}:states:${Region}:${Account}:execution:.*",
      "arn:${Partition}:states:${Region}:${Account}:express:.*"
    ],
    "states:describemaprun": [
      "arn:${Partition}:states:${Region}:${Account}:mapRun:.*"
    ],
    "states:describestatemachine": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:describestatemachinealias": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:describestatemachineforexecution": [
      "arn:${Partition}:states:${Region}:${Account}:execution:.*"
    ],
    "states:getactivitytask": [
      "arn:${Partition}:states:${Region}:${Account}:activity:.*"
    ],
    "states:getexecutionhistory": [
      "arn:${Partition}:states:${Region}:${Account}:execution:.*"
    ],
    "states:listexecutions": [
      "arn:${Partition}:states:${Region}:${Account}:mapRun:.*",
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:listmapruns": [
      "arn:${Partition}:states:${Region}:${Account}:execution:.*"
    ],
    "states:liststatemachinealiases": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:liststatemachineversions": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:listtagsforresource": [
      "arn:${Partition}:states:${Region}:${Account}:activity:.*",
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:publishstatemachineversion": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:redriveexecution": [
      "arn:${Partition}:states:${Region}:${Account}:execution:.*"
    ],
    "states:startexecution": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:startsyncexecution": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:stopexecution": [
      "arn:${Partition}:states:${Region}:${Account}:execution:.*"
    ],
    "states:tagresource": [
      "arn:${Partition}:states:${Region}:${Account}:activity:.*",
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:untagresource": [
      "arn:${Partition}:states:${Region}:${Account}:activity:.*",
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:updatemaprun": [
      "arn:${Partition}:states:${Region}:${Account}:mapRun:.*"
    ],
    "states:updatestatemachine": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "states:updatestatemachinealias": [
      "arn:${Partition}:states:${Region}:${Account}:stateMachine:.*"
    ],
    "storagegateway:addcache": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:addtagstoresource": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:fs-association/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tape/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/.*"
    ],
    "storagegateway:adduploadbuffer": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:addworkingstorage": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:assigntapepool": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:tape/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/.*"
    ],
    "storagegateway:associatefilesystem": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:attachvolume": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:bypassgovernanceretention": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/.*"
    ],
    "storagegateway:cancelarchival": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tape/.*"
    ],
    "storagegateway:cancelcachereport": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:cancelretrieval": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tape/.*"
    ],
    "storagegateway:createcachediscsivolume": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:createnfsfileshare": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:createsmbfileshare": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:createsnapshot": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:createsnapshotfromvolumerecoverypoint": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:createstorediscsivolume": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:createtapes": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/.*"
    ],
    "storagegateway:createtapewithbarcode": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/.*"
    ],
    "storagegateway:deleteautomatictapecreationpolicy": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:deletebandwidthratelimit": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:deletecachereport": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:deletechapcredentials": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:deletefileshare": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:deletegateway": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:deletesnapshotschedule": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:deletetape": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tape/.*"
    ],
    "storagegateway:deletetapepool": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/.*"
    ],
    "storagegateway:deletevolume": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describeavailabilitymonitortest": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describebandwidthratelimit": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describebandwidthratelimitschedule": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describecache": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describecachediscsivolumes": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describecachereport": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:describechapcredentials": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describefilesystemassociations": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:fs-association/.*"
    ],
    "storagegateway:describegatewayinformation": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describemaintenancestarttime": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describenfsfileshares": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:describesmbfileshares": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:describesmbsettings": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describesnapshotschedule": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describestorediscsivolumes": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describetaperecoverypoints": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describetapes": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describeuploadbuffer": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describevtldevices": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:describeworkingstorage": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:detachvolume": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:disablegateway": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:disassociatefilesystem": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:fs-association/.*"
    ],
    "storagegateway:evictfilesfailingupload": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:joindomain": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:listlocaldisks": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:listtagsforresource": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tape/.*"
    ],
    "storagegateway:listvolumeinitiators": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:listvolumerecoverypoints": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:notifywhenuploaded": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:refreshcache": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:removetagsfromresource": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:fs-association/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tape/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/.*"
    ],
    "storagegateway:resetcache": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:retrievetapearchive": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tape/.*"
    ],
    "storagegateway:retrievetaperecoverypoint": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tape/.*"
    ],
    "storagegateway:setlocalconsolepassword": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:setsmbguestpassword": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:shutdowngateway": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:startavailabilitymonitortest": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:startcachereport": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:startgateway": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updateautomatictapecreationpolicy": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:storagegateway:${Region}:${Account}:tapepool/.*"
    ],
    "storagegateway:updatebandwidthratelimit": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updatebandwidthratelimitschedule": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updatechapcredentials": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updatefilesystemassociation": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:fs-association/.*"
    ],
    "storagegateway:updategatewayinformation": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updategatewaysoftwarenow": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updatemaintenancestarttime": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updatenfsfileshare": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:updatesmbfileshare": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:share/.*"
    ],
    "storagegateway:updatesmbfilesharevisibility": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updatesmblocalgroups": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updatesmbsecuritystrategy": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updatesnapshotschedule": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "storagegateway:updatevtldevicetype": [
      "arn:${Partition}:storagegateway:${Region}:${Account}:gateway/.*"
    ],
    "sts:assumerole": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "sts:assumerolewithsaml": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "sts:assumerolewithwebidentity": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "sts:assumeroot": [
      "arn:${Partition}:iam::${Account}:root"
    ],
    "sts:getfederationtoken": [
      "arn:${Partition}:sts::${Account}:federated-user/.*"
    ],
    "sts:setcontext": [
      "arn:${Partition}:iam::${Account}:role/.*",
      "arn:${Partition}:sts::${Account}:self"
    ],
    "sts:setsourceidentity": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "sts:tagsession": [
      "arn:${Partition}:iam::${Account}:role/.*"
    ],
    "supportauthz:deletesupportpermit": [
      "arn:${Partition}:supportauthz:${Region}:${Account}:supportpermit/.*"
    ],
    "supportauthz:getsupportpermit": [
      "arn:${Partition}:supportauthz:${Region}:${Account}:supportpermit/.*"
    ],
    "supportauthz:listtagsforresource": [
      "arn:${Partition}:supportauthz:${Region}:${Account}:supportpermit/.*"
    ],
    "supportauthz:rejectsupportpermitrequest": [
      "arn:${Partition}:supportauthz:${Region}:${Account}:supportpermitrequest/.*"
    ],
    "supportauthz:tagresource": [
      "arn:${Partition}:supportauthz:${Region}:${Account}:supportpermit/.*"
    ],
    "supportauthz:untagresource": [
      "arn:${Partition}:supportauthz:${Region}:${Account}:supportpermit/.*"
    ],
    "swf:canceltimer": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:cancelworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:completeworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:continueasnewworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:countclosedworkflowexecutions": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:countopenworkflowexecutions": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:countpendingactivitytasks": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:countpendingdecisiontasks": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:deleteactivitytype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:deleteworkflowtype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:deprecateactivitytype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:deprecatedomain": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:deprecateworkflowtype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:describeactivitytype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:describedomain": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:describeworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:describeworkflowtype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:failworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:getworkflowexecutionhistory": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:listactivitytypes": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:listclosedworkflowexecutions": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:listopenworkflowexecutions": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:listtagsforresource": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:listworkflowtypes": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:pollforactivitytask": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:pollfordecisiontask": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:recordactivitytaskheartbeat": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:recordmarker": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:registeractivitytype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:registerworkflowtype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:requestcancelactivitytask": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:requestcancelexternalworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:requestcancelworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:respondactivitytaskcanceled": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:respondactivitytaskcompleted": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:respondactivitytaskfailed": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:responddecisiontaskcompleted": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:scheduleactivitytask": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:signalexternalworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:signalworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:startchildworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:starttimer": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:startworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:tagresource": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:terminateworkflowexecution": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:undeprecateactivitytype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:undeprecatedomain": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:undeprecateworkflowtype": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "swf:untagresource": [
      "arn:${Partition}:swf::${Account}:/domain/.*"
    ],
    "synthetics:associateresource": [
      "arn:${Partition}:synthetics:${Region}:${Account}:group:.*"
    ],
    "synthetics:deletecanary": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*"
    ],
    "synthetics:deletegroup": [
      "arn:${Partition}:synthetics:${Region}:${Account}:group:.*"
    ],
    "synthetics:disassociateresource": [
      "arn:${Partition}:synthetics:${Region}:${Account}:group:.*"
    ],
    "synthetics:getcanary": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*"
    ],
    "synthetics:getcanaryruns": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*"
    ],
    "synthetics:getgroup": [
      "arn:${Partition}:synthetics:${Region}:${Account}:group:.*"
    ],
    "synthetics:listassociatedgroups": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*"
    ],
    "synthetics:listgroupresources": [
      "arn:${Partition}:synthetics:${Region}:${Account}:group:.*"
    ],
    "synthetics:listtagsforresource": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*",
      "arn:${Partition}:synthetics:${Region}:${Account}:group:.*"
    ],
    "synthetics:startcanary": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*"
    ],
    "synthetics:startcanarydryrun": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*"
    ],
    "synthetics:stopcanary": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*"
    ],
    "synthetics:tagresource": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*",
      "arn:${Partition}:synthetics:${Region}:${Account}:group:.*"
    ],
    "synthetics:untagresource": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*",
      "arn:${Partition}:synthetics:${Region}:${Account}:group:.*"
    ],
    "synthetics:updatecanary": [
      "arn:${Partition}:synthetics:${Region}:${Account}:canary:.*"
    ],
    "textract:createadapterversion": [
      "arn:${Partition}:textract:${Region}:${Account}:/adapters/.*"
    ],
    "textract:deleteadapter": [
      "arn:${Partition}:textract:${Region}:${Account}:/adapters/.*"
    ],
    "textract:deleteadapterversion": [
      "arn:${Partition}:textract:${Region}:${Account}:/adapters/.*"
    ],
    "textract:getadapter": [
      "arn:${Partition}:textract:${Region}:${Account}:/adapters/.*"
    ],
    "textract:getadapterversion": [
      "arn:${Partition}:textract:${Region}:${Account}:/adapters/.*"
    ],
    "textract:listtagsforresource": [
      "arn:${Partition}:textract:${Region}:${Account}:/adapters/.*"
    ],
    "textract:tagresource": [
      "arn:${Partition}:textract:${Region}:${Account}:/adapters/.*"
    ],
    "textract:untagresource": [
      "arn:${Partition}:textract:${Region}:${Account}:/adapters/.*"
    ],
    "textract:updateadapter": [
      "arn:${Partition}:textract:${Region}:${Account}:/adapters/.*"
    ],
    "thinclient:deletedevice": [
      "arn:${Partition}:thinclient:${Region}:${Account}:device/.*"
    ],
    "thinclient:deleteenvironment": [
      "arn:${Partition}:thinclient:${Region}:${Account}:environment/.*"
    ],
    "thinclient:deregisterdevice": [
      "arn:${Partition}:thinclient:${Region}:${Account}:device/.*"
    ],
    "thinclient:getdevice": [
      "arn:${Partition}:thinclient:${Region}:${Account}:device/.*"
    ],
    "thinclient:getdevicedetails": [
      "arn:${Partition}:thinclient:${Region}:${Account}:device/.*"
    ],
    "thinclient:getenvironment": [
      "arn:${Partition}:thinclient:${Region}:${Account}:environment/.*"
    ],
    "thinclient:getsoftwareset": [
      "arn:${Partition}:thinclient:${Region}:${Account}:softwareset/.*"
    ],
    "thinclient:listdevicesessions": [
      "arn:${Partition}:thinclient:${Region}:${Account}:device/.*"
    ],
    "thinclient:listtagsforresource": [
      "arn:${Partition}:thinclient:${Region}:${Account}:device/.*",
      "arn:${Partition}:thinclient:${Region}:${Account}:environment/.*",
      "arn:${Partition}:thinclient:${Region}:${Account}:softwareset/.*"
    ],
    "thinclient:tagresource": [
      "arn:${Partition}:thinclient:${Region}:${Account}:device/.*",
      "arn:${Partition}:thinclient:${Region}:${Account}:environment/.*",
      "arn:${Partition}:thinclient:${Region}:${Account}:softwareset/.*"
    ],
    "thinclient:untagresource": [
      "arn:${Partition}:thinclient:${Region}:${Account}:device/.*",
      "arn:${Partition}:thinclient:${Region}:${Account}:environment/.*",
      "arn:${Partition}:thinclient:${Region}:${Account}:softwareset/.*"
    ],
    "thinclient:updatedevice": [
      "arn:${Partition}:thinclient:${Region}:${Account}:device/.*"
    ],
    "thinclient:updateenvironment": [
      "arn:${Partition}:thinclient:${Region}:${Account}:environment/.*"
    ],
    "thinclient:updatesoftwareset": [
      "arn:${Partition}:thinclient:${Region}:${Account}:softwareset/.*"
    ],
    "timestream-influxdb:createdbbackup": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-backup/.*"
    ],
    "timestream-influxdb:createdbcluster": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-parameter-group/.*"
    ],
    "timestream-influxdb:createdbinstance": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-parameter-group/.*"
    ],
    "timestream-influxdb:deletedbbackup": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-backup/.*"
    ],
    "timestream-influxdb:deletedbcluster": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/.*"
    ],
    "timestream-influxdb:deletedbinstance": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-instance/.*"
    ],
    "timestream-influxdb:getdbbackup": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-backup/.*"
    ],
    "timestream-influxdb:getdbcluster": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/.*"
    ],
    "timestream-influxdb:getdbinstance": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-instance/.*"
    ],
    "timestream-influxdb:getdbparametergroup": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-parameter-group/.*"
    ],
    "timestream-influxdb:listdbinstancesforcluster": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/.*"
    ],
    "timestream-influxdb:listtagsforresource": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-backup/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-instance/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-parameter-group/.*"
    ],
    "timestream-influxdb:rebootdbcluster": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-instance/.*"
    ],
    "timestream-influxdb:rebootdbinstance": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-instance/.*"
    ],
    "timestream-influxdb:restorefromdbbackup": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-backup/.*"
    ],
    "timestream-influxdb:tagresource": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-backup/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-instance/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-parameter-group/.*"
    ],
    "timestream-influxdb:untagresource": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-backup/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-instance/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-parameter-group/.*"
    ],
    "timestream-influxdb:updatedbcluster": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-parameter-group/.*"
    ],
    "timestream-influxdb:updatedbinstance": [
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-instance/.*",
      "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-parameter-group/.*"
    ],
    "timestream:createbatchloadtask": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:createdatabase": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:createtable": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:deletedatabase": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:deletescheduledquery": [
      "arn:${Partition}:timestream:${Region}:${Account}:scheduled-query/.*"
    ],
    "timestream:deletetable": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:describedatabase": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:describescheduledquery": [
      "arn:${Partition}:timestream:${Region}:${Account}:scheduled-query/.*"
    ],
    "timestream:describetable": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:executescheduledquery": [
      "arn:${Partition}:timestream:${Region}:${Account}:scheduled-query/.*"
    ],
    "timestream:listmeasures": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:listtables": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:listtagsforresource": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*",
      "arn:${Partition}:timestream:${Region}:${Account}:scheduled-query/.*"
    ],
    "timestream:preparequery": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:select": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:startawsbackupjob": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:startawsrestorejob": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:tagresource": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*",
      "arn:${Partition}:timestream:${Region}:${Account}:scheduled-query/.*"
    ],
    "timestream:unload": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:untagresource": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*",
      "arn:${Partition}:timestream:${Region}:${Account}:scheduled-query/.*"
    ],
    "timestream:updatedatabase": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:updatescheduledquery": [
      "arn:${Partition}:timestream:${Region}:${Account}:scheduled-query/.*"
    ],
    "timestream:updatetable": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "timestream:writerecords": [
      "arn:${Partition}:timestream:${Region}:${Account}:database/.*"
    ],
    "tnb:cancelsolnetworkoperation": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-operation/.*"
    ],
    "tnb:createsolfunctionpackage": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*"
    ],
    "tnb:createsolnetworkinstance": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-instance/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:createsolnetworkpackage": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:deletesolfunctionpackage": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*"
    ],
    "tnb:deletesolnetworkinstance": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-instance/.*"
    ],
    "tnb:deletesolnetworkpackage": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:getsolfunctioninstance": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-instance/.*"
    ],
    "tnb:getsolfunctionpackage": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*"
    ],
    "tnb:getsolfunctionpackagecontent": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*"
    ],
    "tnb:getsolfunctionpackagedescriptor": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*"
    ],
    "tnb:getsolnetworkinstance": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-instance/.*"
    ],
    "tnb:getsolnetworkoperation": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-operation/.*"
    ],
    "tnb:getsolnetworkpackage": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:getsolnetworkpackagecontent": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:getsolnetworkpackagedescriptor": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:instantiatesolnetworkinstance": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-instance/.*"
    ],
    "tnb:listsolfunctioninstances": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-instance/.*"
    ],
    "tnb:listsolfunctionpackages": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*"
    ],
    "tnb:listsolnetworkinstances": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-instance/.*"
    ],
    "tnb:listsolnetworkoperations": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-operation/.*"
    ],
    "tnb:listsolnetworkpackages": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:putsolfunctionpackagecontent": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*"
    ],
    "tnb:putsolnetworkpackagecontent": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:tagresource": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-instance/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:network-instance/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:network-operation/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:terminatesolnetworkinstance": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-instance/.*"
    ],
    "tnb:untagresource": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-instance/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:network-instance/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:network-operation/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:updatesolfunctionpackage": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*"
    ],
    "tnb:updatesolnetworkinstance": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-instance/.*",
      "arn:${Partition}:tnb:${Region}:${Account}:network-instance/.*"
    ],
    "tnb:updatesolnetworkpackage": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "tnb:validatesolfunctionpackagecontent": [
      "arn:${Partition}:tnb:${Region}:${Account}:function-package/.*"
    ],
    "tnb:validatesolnetworkpackagecontent": [
      "arn:${Partition}:tnb:${Region}:${Account}:network-package/.*"
    ],
    "transcribe:deletecallanalyticscategory": [
      "arn:${Partition}:transcribe:${Region}:${Account}:analytics-category/.*"
    ],
    "transcribe:deletecallanalyticsjob": [
      "arn:${Partition}:transcribe:${Region}:${Account}:analytics/.*"
    ],
    "transcribe:deletelanguagemodel": [
      "arn:${Partition}:transcribe:${Region}:${Account}:language-model/.*"
    ],
    "transcribe:deletemedicalscribejob": [
      "arn:${Partition}:transcribe:${Region}:${Account}:medical-scribe-job/.*"
    ],
    "transcribe:deletemedicaltranscriptionjob": [
      "arn:${Partition}:transcribe:${Region}:${Account}:medical-transcription-job/.*"
    ],
    "transcribe:deletemedicalvocabulary": [
      "arn:${Partition}:transcribe:${Region}:${Account}:medical-vocabulary/.*"
    ],
    "transcribe:deletetranscriptionjob": [
      "arn:${Partition}:transcribe:${Region}:${Account}:transcription-job/.*"
    ],
    "transcribe:deletevocabulary": [
      "arn:${Partition}:transcribe:${Region}:${Account}:vocabulary/.*"
    ],
    "transcribe:deletevocabularyfilter": [
      "arn:${Partition}:transcribe:${Region}:${Account}:vocabulary-filter/.*"
    ],
    "transcribe:describelanguagemodel": [
      "arn:${Partition}:transcribe:${Region}:${Account}:language-model/.*"
    ],
    "transcribe:getcallanalyticscategory": [
      "arn:${Partition}:transcribe:${Region}:${Account}:analytics-category/.*"
    ],
    "transcribe:getcallanalyticsjob": [
      "arn:${Partition}:transcribe:${Region}:${Account}:analytics/.*"
    ],
    "transcribe:getmedicalscribejob": [
      "arn:${Partition}:transcribe:${Region}:${Account}:medical-scribe-job/.*"
    ],
    "transcribe:getmedicaltranscriptionjob": [
      "arn:${Partition}:transcribe:${Region}:${Account}:medical-transcription-job/.*"
    ],
    "transcribe:getmedicalvocabulary": [
      "arn:${Partition}:transcribe:${Region}:${Account}:medical-vocabulary/.*"
    ],
    "transcribe:gettranscriptionjob": [
      "arn:${Partition}:transcribe:${Region}:${Account}:transcription-job/.*"
    ],
    "transcribe:getvocabulary": [
      "arn:${Partition}:transcribe:${Region}:${Account}:vocabulary/.*"
    ],
    "transcribe:getvocabularyfilter": [
      "arn:${Partition}:transcribe:${Region}:${Account}:vocabulary-filter/.*"
    ],
    "transcribe:updatecallanalyticscategory": [
      "arn:${Partition}:transcribe:${Region}:${Account}:analytics-category/.*"
    ],
    "transcribe:updatemedicalvocabulary": [
      "arn:${Partition}:transcribe:${Region}:${Account}:medical-vocabulary/.*"
    ],
    "transcribe:updatevocabulary": [
      "arn:${Partition}:transcribe:${Region}:${Account}:vocabulary/.*"
    ],
    "transcribe:updatevocabularyfilter": [
      "arn:${Partition}:transcribe:${Region}:${Account}:vocabulary-filter/.*"
    ],
    "transfer:createaccess": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:createagreement": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:createconnector": [
      "arn:${Partition}:transfer:${Region}:${Account}:profile/.*"
    ],
    "transfer:createuser": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:deleteaccess": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:deleteagreement": [
      "arn:${Partition}:transfer:${Region}:${Account}:agreement/.*"
    ],
    "transfer:deletecertificate": [
      "arn:${Partition}:transfer:${Region}:${Account}:certificate/.*"
    ],
    "transfer:deleteconnector": [
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*"
    ],
    "transfer:deletehostkey": [
      "arn:${Partition}:transfer:${Region}:${Account}:host-key/.*"
    ],
    "transfer:deleteprofile": [
      "arn:${Partition}:transfer:${Region}:${Account}:profile/.*"
    ],
    "transfer:deleteserver": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:deletesshpublickey": [
      "arn:${Partition}:transfer:${Region}:${Account}:user/.*"
    ],
    "transfer:deleteuser": [
      "arn:${Partition}:transfer:${Region}:${Account}:user/.*"
    ],
    "transfer:deletewebapp": [
      "arn:${Partition}:transfer:${Region}:${Account}:webapp/.*"
    ],
    "transfer:deletewebappcustomization": [
      "arn:${Partition}:transfer:${Region}:${Account}:webapp/.*"
    ],
    "transfer:deleteworkflow": [
      "arn:${Partition}:transfer:${Region}:${Account}:workflow/.*"
    ],
    "transfer:describeaccess": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:describeagreement": [
      "arn:${Partition}:transfer:${Region}:${Account}:agreement/.*"
    ],
    "transfer:describecertificate": [
      "arn:${Partition}:transfer:${Region}:${Account}:certificate/.*"
    ],
    "transfer:describeconnector": [
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*"
    ],
    "transfer:describeexecution": [
      "arn:${Partition}:transfer:${Region}:${Account}:workflow/.*"
    ],
    "transfer:describehostkey": [
      "arn:${Partition}:transfer:${Region}:${Account}:host-key/.*"
    ],
    "transfer:describeprofile": [
      "arn:${Partition}:transfer:${Region}:${Account}:profile/.*"
    ],
    "transfer:describeserver": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:describeuser": [
      "arn:${Partition}:transfer:${Region}:${Account}:user/.*"
    ],
    "transfer:describewebapp": [
      "arn:${Partition}:transfer:${Region}:${Account}:webapp/.*"
    ],
    "transfer:describewebappcustomization": [
      "arn:${Partition}:transfer:${Region}:${Account}:webapp/.*"
    ],
    "transfer:describeworkflow": [
      "arn:${Partition}:transfer:${Region}:${Account}:workflow/.*"
    ],
    "transfer:importhostkey": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:importsshpublickey": [
      "arn:${Partition}:transfer:${Region}:${Account}:user/.*"
    ],
    "transfer:listaccesses": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:listagreements": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:listexecutions": [
      "arn:${Partition}:transfer:${Region}:${Account}:workflow/.*"
    ],
    "transfer:listfiletransferresults": [
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*"
    ],
    "transfer:listhostkeys": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:listtagsforresource": [
      "arn:${Partition}:transfer:${Region}:${Account}:agreement/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:certificate/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:host-key/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:profile/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:user/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:workflow/.*"
    ],
    "transfer:listusers": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:sendworkflowstepstate": [
      "arn:${Partition}:transfer:${Region}:${Account}:workflow/.*"
    ],
    "transfer:startdirectorylisting": [
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*"
    ],
    "transfer:startfiletransfer": [
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*"
    ],
    "transfer:startremotedelete": [
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*"
    ],
    "transfer:startremotemove": [
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*"
    ],
    "transfer:startserver": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:stopserver": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:tagresource": [
      "arn:${Partition}:transfer:${Region}:${Account}:agreement/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:certificate/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:host-key/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:profile/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:user/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:webapp/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:workflow/.*"
    ],
    "transfer:testconnection": [
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*"
    ],
    "transfer:testidentityprovider": [
      "arn:${Partition}:transfer:${Region}:${Account}:user/.*"
    ],
    "transfer:untagresource": [
      "arn:${Partition}:transfer:${Region}:${Account}:agreement/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:certificate/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:host-key/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:profile/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:user/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:webapp/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:workflow/.*"
    ],
    "transfer:updateagreement": [
      "arn:${Partition}:transfer:${Region}:${Account}:agreement/.*"
    ],
    "transfer:updatecertificate": [
      "arn:${Partition}:transfer:${Region}:${Account}:certificate/.*"
    ],
    "transfer:updateconnector": [
      "arn:${Partition}:transfer:${Region}:${Account}:connector/.*",
      "arn:${Partition}:transfer:${Region}:${Account}:profile/.*"
    ],
    "transfer:updatehostkey": [
      "arn:${Partition}:transfer:${Region}:${Account}:host-key/.*"
    ],
    "transfer:updateprofile": [
      "arn:${Partition}:transfer:${Region}:${Account}:profile/.*"
    ],
    "transfer:updateserver": [
      "arn:${Partition}:transfer:${Region}:${Account}:server/.*"
    ],
    "transfer:updateuser": [
      "arn:${Partition}:transfer:${Region}:${Account}:user/.*"
    ],
    "transfer:updatewebapp": [
      "arn:${Partition}:transfer:${Region}:${Account}:webapp/.*"
    ],
    "transfer:updatewebappcustomization": [
      "arn:${Partition}:transfer:${Region}:${Account}:webapp/.*"
    ],
    "transform-custom:completetransformationpackageupload": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:createanalysis": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:analysis/.*"
    ],
    "transform-custom:createcampaign": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:campaign/.*"
    ],
    "transform-custom:createremediation": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:remediation/.*"
    ],
    "transform-custom:createrepository": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:repository/.*"
    ],
    "transform-custom:createsource": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:source/.*"
    ],
    "transform-custom:createtransformationpackageurl": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:deleteanalysis": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:analysis/.*"
    ],
    "transform-custom:deletecampaign": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:campaign/.*"
    ],
    "transform-custom:deletefinding": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:finding/.*"
    ],
    "transform-custom:deleteknowledgeitem": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:deleteremediation": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:remediation/.*"
    ],
    "transform-custom:deleterepository": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:repository/.*"
    ],
    "transform-custom:deletesource": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:source/.*"
    ],
    "transform-custom:deletetransformationpackage": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:executetransformation": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:getanalysis": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:analysis/.*"
    ],
    "transform-custom:getanalysisartifactdownloadurl": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:analysis/.*"
    ],
    "transform-custom:getcampaign": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:campaign/.*"
    ],
    "transform-custom:getfinding": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:finding/.*"
    ],
    "transform-custom:getknowledgeitem": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:getremediation": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:remediation/.*"
    ],
    "transform-custom:getrepository": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:repository/.*"
    ],
    "transform-custom:getsource": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:source/.*"
    ],
    "transform-custom:gettransformationpackageurl": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:listanalysisartifacts": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:analysis/.*"
    ],
    "transform-custom:listcampaignrepositories": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:campaign/.*"
    ],
    "transform-custom:listtransformationpackageshares": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:sharetransformationpackage": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:tagresource": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:analysis/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:finding/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:remediation/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:repository/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:source/.*"
    ],
    "transform-custom:unsharetransformationpackage": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:untagresource": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:analysis/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:campaign/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:finding/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:remediation/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:repository/.*",
      "arn:${Partition}:transform-custom:${Region}:${Account}:source/.*"
    ],
    "transform-custom:updateanalysis": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:analysis/.*"
    ],
    "transform-custom:updatecampaign": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:campaign/.*"
    ],
    "transform-custom:updatecampaignrepositorystatus": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:campaign/.*"
    ],
    "transform-custom:updateknowledgeitemconfiguration": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:updateknowledgeitemstatus": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:package/.*"
    ],
    "transform-custom:updateremediation": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:remediation/.*"
    ],
    "transform-custom:updaterepository": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:repository/.*"
    ],
    "transform-custom:updatesource": [
      "arn:${Partition}:transform-custom:${Region}:${Account}:source/.*"
    ],
    "transform:accesstransformprofile": [
      "arn:${Partition}:transform:${Region}:${Account}:profile/.*"
    ],
    "transform:associateconnectorresource": [
      "arn:${Partition}:transform:${Region}:${Account}:connector/.*"
    ],
    "transform:createprofile": [
      "arn:${Partition}:transform:${Region}:${Account}:profile/.*"
    ],
    "transform:deleteconnector": [
      "arn:${Partition}:transform:${Region}:${Account}:connector/.*"
    ],
    "transform:deleteprofile": [
      "arn:${Partition}:transform:${Region}:${Account}:profile/.*"
    ],
    "transform:getconnector": [
      "arn:${Partition}:transform:${Region}:${Account}:connector/.*"
    ],
    "transform:listtagsforresource": [
      "arn:${Partition}:transform:${Region}:${Account}:connector/.*"
    ],
    "transform:rejectconnector": [
      "arn:${Partition}:transform:${Region}:${Account}:connector/.*"
    ],
    "transform:tagresource": [
      "arn:${Partition}:transform:${Region}:${Account}:connector/.*"
    ],
    "transform:untagresource": [
      "arn:${Partition}:transform:${Region}:${Account}:connector/.*"
    ],
    "transform:updateprofile": [
      "arn:${Partition}:transform:${Region}:${Account}:profile/.*"
    ],
    "translate:createparalleldata": [
      "arn:${Partition}:translate:${Region}:${Account}:parallel-data/.*"
    ],
    "translate:deleteparalleldata": [
      "arn:${Partition}:translate:${Region}:${Account}:parallel-data/.*"
    ],
    "translate:deleteterminology": [
      "arn:${Partition}:translate:${Region}:${Account}:terminology/.*"
    ],
    "translate:getparalleldata": [
      "arn:${Partition}:translate:${Region}:${Account}:parallel-data/.*"
    ],
    "translate:getterminology": [
      "arn:${Partition}:translate:${Region}:${Account}:terminology/.*"
    ],
    "translate:importterminology": [
      "arn:${Partition}:translate:${Region}:${Account}:terminology/.*"
    ],
    "translate:listtagsforresource": [
      "arn:${Partition}:translate:${Region}:${Account}:parallel-data/.*",
      "arn:${Partition}:translate:${Region}:${Account}:terminology/.*"
    ],
    "translate:starttexttranslationjob": [
      "arn:${Partition}:translate:${Region}:${Account}:parallel-data/.*",
      "arn:${Partition}:translate:${Region}:${Account}:terminology/.*"
    ],
    "translate:tagresource": [
      "arn:${Partition}:translate:${Region}:${Account}:parallel-data/.*",
      "arn:${Partition}:translate:${Region}:${Account}:terminology/.*"
    ],
    "translate:translatedocument": [
      "arn:${Partition}:translate:${Region}:${Account}:terminology/.*"
    ],
    "translate:translatetext": [
      "arn:${Partition}:translate:${Region}:${Account}:parallel-data/.*",
      "arn:${Partition}:translate:${Region}:${Account}:terminology/.*"
    ],
    "translate:untagresource": [
      "arn:${Partition}:translate:${Region}:${Account}:parallel-data/.*",
      "arn:${Partition}:translate:${Region}:${Account}:terminology/.*"
    ],
    "translate:updateparalleldata": [
      "arn:${Partition}:translate:${Region}:${Account}:parallel-data/.*"
    ],
    "trustedadvisor:describecheckitems": [
      "arn:${Partition}:trustedadvisor:${Region}:${Account}:checks/.*"
    ],
    "trustedadvisor:describecheckrefreshstatuses": [
      "arn:${Partition}:trustedadvisor:${Region}:${Account}:checks/.*"
    ],
    "trustedadvisor:describecheckstatushistorychanges": [
      "arn:${Partition}:trustedadvisor:${Region}:${Account}:checks/.*"
    ],
    "trustedadvisor:describechecksummaries": [
      "arn:${Partition}:trustedadvisor:${Region}:${Account}:checks/.*"
    ],
    "trustedadvisor:excludecheckitems": [
      "arn:${Partition}:trustedadvisor:${Region}:${Account}:checks/.*"
    ],
    "trustedadvisor:includecheckitems": [
      "arn:${Partition}:trustedadvisor:${Region}:${Account}:checks/.*"
    ],
    "trustedadvisor:refreshcheck": [
      "arn:${Partition}:trustedadvisor:${Region}:${Account}:checks/.*"
    ],
    "ts:getexecution": [
      "arn:${Partition}:ts::${Account}:execution/.*"
    ],
    "ts:getexecutionoutput": [
      "arn:${Partition}:ts::${Account}:execution/.*"
    ],
    "ts:gettool": [
      "arn:${Partition}:ts::aws:tool/.*"
    ],
    "ts:listtagsforresource": [
      "arn:${Partition}:ts::${Account}:execution/.*"
    ],
    "ts:tagresource": [
      "arn:${Partition}:ts::${Account}:execution/.*"
    ],
    "ts:untagresource": [
      "arn:${Partition}:ts::${Account}:execution/.*"
    ],
    "vendor-insights:activatesecurityprofile": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:associatedatasource": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:deactivatesecurityprofile": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:deletedatasource": [
      "arn:${Partition}:vendor-insights:::data-source:.*"
    ],
    "vendor-insights:disassociatedatasource": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:getdatasource": [
      "arn:${Partition}:vendor-insights:::data-source:.*"
    ],
    "vendor-insights:getentitledsecurityprofilesnapshot": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:getsecurityprofile": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:getsecurityprofilesnapshot": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:listentitledsecurityprofilesnapshots": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:listsecurityprofilesnapshots": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:listtagsforresource": [
      "arn:${Partition}:vendor-insights:::data-source:.*",
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:tagresource": [
      "arn:${Partition}:vendor-insights:::data-source:.*",
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:untagresource": [
      "arn:${Partition}:vendor-insights:::data-source:.*",
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:updatedatasource": [
      "arn:${Partition}:vendor-insights:::data-source:.*"
    ],
    "vendor-insights:updatesecurityprofile": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:updatesecurityprofilesnapshotcreationconfiguration": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "vendor-insights:updatesecurityprofilesnapshotreleaseconfiguration": [
      "arn:${Partition}:vendor-insights:::security-profile:.*"
    ],
    "verifiedpermissions:createidentitysource": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:createpolicy": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:createpolicystorealias": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*",
      "arn:${Partition}:verifiedpermissions:${Region}:${Account}:policy-store-alias/.*"
    ],
    "verifiedpermissions:createpolicytemplate": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:deleteidentitysource": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:deletepolicy": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:deletepolicystore": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:deletepolicystorealias": [
      "arn:${Partition}:verifiedpermissions:${Region}:${Account}:policy-store-alias/.*"
    ],
    "verifiedpermissions:deletepolicytemplate": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:getidentitysource": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:getpolicy": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:getpolicystore": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:getpolicystorealias": [
      "arn:${Partition}:verifiedpermissions:${Region}:${Account}:policy-store-alias/.*"
    ],
    "verifiedpermissions:getpolicytemplate": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:getschema": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:isauthorized": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:isauthorizedwithtoken": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:listidentitysources": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:listpolicies": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:listpolicytemplates": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:listtagsforresource": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:putschema": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:tagresource": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:untagresource": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:updateidentitysource": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:updatepolicy": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:updatepolicystore": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "verifiedpermissions:updatepolicytemplate": [
      "arn:${Partition}:verifiedpermissions::${Account}:policy-store/.*"
    ],
    "voiceid:associatefraudster": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:createwatchlist": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:deletedomain": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:deletefraudster": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:deletespeaker": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:deletewatchlist": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:describedomain": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:describefraudster": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:describefraudsterregistrationjob": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:describespeaker": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:describespeakerenrollmentjob": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:describewatchlist": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:disassociatefraudster": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:evaluatesession": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:listfraudsterregistrationjobs": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:listfraudsters": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:listspeakerenrollmentjobs": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:listspeakers": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:listtagsforresource": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:listwatchlists": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:optoutspeaker": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:startfraudsterregistrationjob": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:startspeakerenrollmentjob": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:tagresource": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:untagresource": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:updatedomain": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "voiceid:updatewatchlist": [
      "arn:${Partition}:voiceid:${Region}:${Account}:domain/.*"
    ],
    "vpc-lattice-svcs:connect": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice-svcs:invoke": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:createaccesslogsubscription": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:createlistener": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:createresourceconfiguration": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/.*"
    ],
    "vpc-lattice:createresourcegateway": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/.*"
    ],
    "vpc-lattice:createrule": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:createservice": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:createservicenetwork": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:createservicenetworkresourceassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkresourceassociation/.*"
    ],
    "vpc-lattice:createservicenetworkserviceassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkserviceassociation/.*"
    ],
    "vpc-lattice:createservicenetworkvpcassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkvpcassociation/.*"
    ],
    "vpc-lattice:createtargetgroup": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/.*"
    ],
    "vpc-lattice:deleteaccesslogsubscription": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/.*"
    ],
    "vpc-lattice:deleteauthpolicy": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:deletedomainverification": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/.*"
    ],
    "vpc-lattice:deletelistener": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:deleteresourceconfiguration": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*"
    ],
    "vpc-lattice:deleteresourceendpointassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceendpointassociation/.*"
    ],
    "vpc-lattice:deleteresourcegateway": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/.*"
    ],
    "vpc-lattice:deleteresourcepolicy": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:deleterule": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:deleteservice": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:deleteservicenetwork": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:deleteservicenetworkresourceassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkresourceassociation/.*"
    ],
    "vpc-lattice:deleteservicenetworkserviceassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkserviceassociation/.*"
    ],
    "vpc-lattice:deleteservicenetworkvpcassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkvpcassociation/.*"
    ],
    "vpc-lattice:deletetargetgroup": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/.*"
    ],
    "vpc-lattice:deregistertargets": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/.*"
    ],
    "vpc-lattice:getaccesslogsubscription": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/.*"
    ],
    "vpc-lattice:getauthpolicy": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:getdomainverification": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/.*"
    ],
    "vpc-lattice:getlistener": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:getresourceconfiguration": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*"
    ],
    "vpc-lattice:getresourcegateway": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/.*"
    ],
    "vpc-lattice:getresourcepolicy": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:getrule": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:getservice": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:getservicenetwork": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:getservicenetworkresourceassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkresourceassociation/.*"
    ],
    "vpc-lattice:getservicenetworkserviceassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkserviceassociation/.*"
    ],
    "vpc-lattice:getservicenetworkvpcassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkvpcassociation/.*"
    ],
    "vpc-lattice:gettargetgroup": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/.*"
    ],
    "vpc-lattice:listtargets": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/.*"
    ],
    "vpc-lattice:putauthpolicy": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:putresourcepolicy": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:registertargets": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/.*"
    ],
    "vpc-lattice:startdomainverification": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/.*"
    ],
    "vpc-lattice:tagresource": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceendpointassociation/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkresourceassociation/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkserviceassociation/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkvpcassociation/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/.*"
    ],
    "vpc-lattice:untagresource": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceendpointassociation/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkresourceassociation/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkserviceassociation/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkvpcassociation/.*",
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/.*"
    ],
    "vpc-lattice:updateaccesslogsubscription": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/.*"
    ],
    "vpc-lattice:updatelistener": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:updateresourceconfiguration": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/.*"
    ],
    "vpc-lattice:updateresourcegateway": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/.*"
    ],
    "vpc-lattice:updaterule": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:updateservice": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/.*"
    ],
    "vpc-lattice:updateservicenetwork": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/.*"
    ],
    "vpc-lattice:updateservicenetworkvpcassociation": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkvpcassociation/.*"
    ],
    "vpc-lattice:updatetargetgroup": [
      "arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/.*"
    ],
    "vpce:allowmultiregion": [
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/.*"
    ],
    "waf-regional:associatewebacl": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:createbytematchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:bytematchset/.*"
    ],
    "waf-regional:creategeomatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:geomatchset/.*"
    ],
    "waf-regional:createipset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ipset/.*"
    ],
    "waf-regional:createratebasedrule": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/.*"
    ],
    "waf-regional:createregexmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:regexmatch/.*"
    ],
    "waf-regional:createregexpatternset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:regexpatternset/.*"
    ],
    "waf-regional:createrule": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rule/.*"
    ],
    "waf-regional:createrulegroup": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*"
    ],
    "waf-regional:createsizeconstraintset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:sizeconstraintset/.*"
    ],
    "waf-regional:createsqlinjectionmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:sqlinjectionset/.*"
    ],
    "waf-regional:createwebacl": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:createwebaclmigrationstack": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:createxssmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:xssmatchset/.*"
    ],
    "waf-regional:deletebytematchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:bytematchset/.*"
    ],
    "waf-regional:deletegeomatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:geomatchset/.*"
    ],
    "waf-regional:deleteipset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ipset/.*"
    ],
    "waf-regional:deleteloggingconfiguration": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:deletepermissionpolicy": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*"
    ],
    "waf-regional:deleteratebasedrule": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/.*"
    ],
    "waf-regional:deleteregexmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:regexmatch/.*"
    ],
    "waf-regional:deleteregexpatternset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:regexpatternset/.*"
    ],
    "waf-regional:deleterule": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rule/.*"
    ],
    "waf-regional:deleterulegroup": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*"
    ],
    "waf-regional:deletesizeconstraintset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:sizeconstraintset/.*"
    ],
    "waf-regional:deletesqlinjectionmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:sqlinjectionset/.*"
    ],
    "waf-regional:deletewebacl": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:deletexssmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:xssmatchset/.*"
    ],
    "waf-regional:disassociatewebacl": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*"
    ],
    "waf-regional:getbytematchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:bytematchset/.*"
    ],
    "waf-regional:getgeomatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:geomatchset/.*"
    ],
    "waf-regional:getipset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ipset/.*"
    ],
    "waf-regional:getloggingconfiguration": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:getpermissionpolicy": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*"
    ],
    "waf-regional:getratebasedrule": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/.*"
    ],
    "waf-regional:getratebasedrulemanagedkeys": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/.*"
    ],
    "waf-regional:getregexmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:regexmatch/.*"
    ],
    "waf-regional:getregexpatternset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:regexpatternset/.*"
    ],
    "waf-regional:getrule": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rule/.*"
    ],
    "waf-regional:getrulegroup": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*"
    ],
    "waf-regional:getsampledrequests": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:getsizeconstraintset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:sizeconstraintset/.*"
    ],
    "waf-regional:getsqlinjectionmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:sqlinjectionset/.*"
    ],
    "waf-regional:getwebacl": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:getwebaclforresource": [
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*"
    ],
    "waf-regional:getxssmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:xssmatchset/.*"
    ],
    "waf-regional:listresourcesforwebacl": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:listtagsforresource": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:rule/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:putloggingconfiguration": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:putpermissionpolicy": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*"
    ],
    "waf-regional:tagresource": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:rule/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:untagresource": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:rule/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*",
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:updatebytematchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:bytematchset/.*"
    ],
    "waf-regional:updategeomatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:geomatchset/.*"
    ],
    "waf-regional:updateipset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ipset/.*"
    ],
    "waf-regional:updateratebasedrule": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:ratebasedrule/.*"
    ],
    "waf-regional:updateregexmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:regexmatch/.*"
    ],
    "waf-regional:updateregexpatternset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:regexpatternset/.*"
    ],
    "waf-regional:updaterule": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rule/.*"
    ],
    "waf-regional:updaterulegroup": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:rulegroup/.*"
    ],
    "waf-regional:updatesizeconstraintset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:sizeconstraintset/.*"
    ],
    "waf-regional:updatesqlinjectionmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:sqlinjectionset/.*"
    ],
    "waf-regional:updatewebacl": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:webacl/.*"
    ],
    "waf-regional:updatexssmatchset": [
      "arn:${Partition}:waf-regional:${Region}:${Account}:xssmatchset/.*"
    ],
    "waf:createbytematchset": [
      "arn:${Partition}:waf::${Account}:bytematchset/.*"
    ],
    "waf:creategeomatchset": [
      "arn:${Partition}:waf::${Account}:geomatchset/.*"
    ],
    "waf:createipset": [
      "arn:${Partition}:waf::${Account}:ipset/.*"
    ],
    "waf:createratebasedrule": [
      "arn:${Partition}:waf::${Account}:ratebasedrule/.*"
    ],
    "waf:createregexmatchset": [
      "arn:${Partition}:waf::${Account}:regexmatch/.*"
    ],
    "waf:createregexpatternset": [
      "arn:${Partition}:waf::${Account}:regexpatternset/.*"
    ],
    "waf:createrule": [
      "arn:${Partition}:waf::${Account}:rule/.*"
    ],
    "waf:createrulegroup": [
      "arn:${Partition}:waf::${Account}:rulegroup/.*"
    ],
    "waf:createsizeconstraintset": [
      "arn:${Partition}:waf::${Account}:sizeconstraintset/.*"
    ],
    "waf:createsqlinjectionmatchset": [
      "arn:${Partition}:waf::${Account}:sqlinjectionset/.*"
    ],
    "waf:createwebacl": [
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:createwebaclmigrationstack": [
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:createxssmatchset": [
      "arn:${Partition}:waf::${Account}:xssmatchset/.*"
    ],
    "waf:deletebytematchset": [
      "arn:${Partition}:waf::${Account}:bytematchset/.*"
    ],
    "waf:deletegeomatchset": [
      "arn:${Partition}:waf::${Account}:geomatchset/.*"
    ],
    "waf:deleteipset": [
      "arn:${Partition}:waf::${Account}:ipset/.*"
    ],
    "waf:deleteloggingconfiguration": [
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:deletepermissionpolicy": [
      "arn:${Partition}:waf::${Account}:rulegroup/.*"
    ],
    "waf:deleteratebasedrule": [
      "arn:${Partition}:waf::${Account}:ratebasedrule/.*"
    ],
    "waf:deleteregexmatchset": [
      "arn:${Partition}:waf::${Account}:regexmatch/.*"
    ],
    "waf:deleteregexpatternset": [
      "arn:${Partition}:waf::${Account}:regexpatternset/.*"
    ],
    "waf:deleterule": [
      "arn:${Partition}:waf::${Account}:rule/.*"
    ],
    "waf:deleterulegroup": [
      "arn:${Partition}:waf::${Account}:rulegroup/.*"
    ],
    "waf:deletesizeconstraintset": [
      "arn:${Partition}:waf::${Account}:sizeconstraintset/.*"
    ],
    "waf:deletesqlinjectionmatchset": [
      "arn:${Partition}:waf::${Account}:sqlinjectionset/.*"
    ],
    "waf:deletewebacl": [
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:deletexssmatchset": [
      "arn:${Partition}:waf::${Account}:xssmatchset/.*"
    ],
    "waf:getbytematchset": [
      "arn:${Partition}:waf::${Account}:bytematchset/.*"
    ],
    "waf:getgeomatchset": [
      "arn:${Partition}:waf::${Account}:geomatchset/.*"
    ],
    "waf:getipset": [
      "arn:${Partition}:waf::${Account}:ipset/.*"
    ],
    "waf:getloggingconfiguration": [
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:getpermissionpolicy": [
      "arn:${Partition}:waf::${Account}:rulegroup/.*"
    ],
    "waf:getratebasedrule": [
      "arn:${Partition}:waf::${Account}:ratebasedrule/.*"
    ],
    "waf:getratebasedrulemanagedkeys": [
      "arn:${Partition}:waf::${Account}:ratebasedrule/.*"
    ],
    "waf:getregexmatchset": [
      "arn:${Partition}:waf::${Account}:regexmatch/.*"
    ],
    "waf:getregexpatternset": [
      "arn:${Partition}:waf::${Account}:regexpatternset/.*"
    ],
    "waf:getrule": [
      "arn:${Partition}:waf::${Account}:rule/.*"
    ],
    "waf:getrulegroup": [
      "arn:${Partition}:waf::${Account}:rulegroup/.*"
    ],
    "waf:getsampledrequests": [
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:getsizeconstraintset": [
      "arn:${Partition}:waf::${Account}:sizeconstraintset/.*"
    ],
    "waf:getsqlinjectionmatchset": [
      "arn:${Partition}:waf::${Account}:sqlinjectionset/.*"
    ],
    "waf:getwebacl": [
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:getxssmatchset": [
      "arn:${Partition}:waf::${Account}:xssmatchset/.*"
    ],
    "waf:listtagsforresource": [
      "arn:${Partition}:waf::${Account}:ratebasedrule/.*",
      "arn:${Partition}:waf::${Account}:rule/.*",
      "arn:${Partition}:waf::${Account}:rulegroup/.*",
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:putloggingconfiguration": [
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:putpermissionpolicy": [
      "arn:${Partition}:waf::${Account}:rulegroup/.*"
    ],
    "waf:tagresource": [
      "arn:${Partition}:waf::${Account}:ratebasedrule/.*",
      "arn:${Partition}:waf::${Account}:rule/.*",
      "arn:${Partition}:waf::${Account}:rulegroup/.*",
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:untagresource": [
      "arn:${Partition}:waf::${Account}:ratebasedrule/.*",
      "arn:${Partition}:waf::${Account}:rule/.*",
      "arn:${Partition}:waf::${Account}:rulegroup/.*",
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:updatebytematchset": [
      "arn:${Partition}:waf::${Account}:bytematchset/.*"
    ],
    "waf:updategeomatchset": [
      "arn:${Partition}:waf::${Account}:geomatchset/.*"
    ],
    "waf:updateipset": [
      "arn:${Partition}:waf::${Account}:ipset/.*"
    ],
    "waf:updateratebasedrule": [
      "arn:${Partition}:waf::${Account}:ratebasedrule/.*"
    ],
    "waf:updateregexmatchset": [
      "arn:${Partition}:waf::${Account}:regexmatch/.*"
    ],
    "waf:updateregexpatternset": [
      "arn:${Partition}:waf::${Account}:regexpatternset/.*"
    ],
    "waf:updaterule": [
      "arn:${Partition}:waf::${Account}:rule/.*"
    ],
    "waf:updaterulegroup": [
      "arn:${Partition}:waf::${Account}:rulegroup/.*"
    ],
    "waf:updatesizeconstraintset": [
      "arn:${Partition}:waf::${Account}:sizeconstraintset/.*"
    ],
    "waf:updatesqlinjectionmatchset": [
      "arn:${Partition}:waf::${Account}:sqlinjectionset/.*"
    ],
    "waf:updatewebacl": [
      "arn:${Partition}:waf::${Account}:webacl/.*"
    ],
    "waf:updatexssmatchset": [
      "arn:${Partition}:waf::${Account}:xssmatchset/.*"
    ],
    "wafv2:associatewebacl": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*",
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:createipset": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:createregexpatternset": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:createrulegroup": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:createwebacl": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:deletefirewallmanagerrulegroups": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:deleteipset": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:deleteloggingconfiguration": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:deletepermissionpolicy": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:deleteregexpatternset": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:deleterulegroup": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:deletewebacl": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:disassociatefirewallmanager": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:disassociatewebacl": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*"
    ],
    "wafv2:getipset": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:getloggingconfiguration": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:getmanagedruleset": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:getpermissionpolicy": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:getratebasedstatementmanagedkeys": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:getregexpatternset": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:getrulegroup": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:getsampledrequests": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:gettoppathstatisticsbytraffic": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:getwebacl": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:getwebaclforresource": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*",
      "arn:${Partition}:apigateway:${Region}::/restapis/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:appsync:${Region}:${Account}:apis/.*",
      "arn:${Partition}:elasticloadbalancing:${Region}:${Account}:loadbalancer/app/.*",
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*",
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:listresourcesforwebacl": [
      "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/.*",
      "arn:${Partition}:amplify:${Region}:${Account}:apps/.*",
      "arn:${Partition}:apprunner:${Region}:${Account}:service/.*",
      "arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/.*",
      "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/.*",
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:listtagsforresource": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:putfirewallmanagerrulegroups": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:putloggingconfiguration": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:putmanagedrulesetversions": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:putpermissionpolicy": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:tagresource": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:untagresource": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:updateipset": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:updatemanagedrulesetversionexpirydate": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:updateregexpatternset": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:updaterulegroup": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wafv2:updatewebacl": [
      "arn:${Partition}:wafv2:${Region}:${Account}:.*"
    ],
    "wellarchitected:associatelenses": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:associateprofiles": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:createagentcontext": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:createagentgoal": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:createlensshare": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*"
    ],
    "wellarchitected:createlensversion": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*"
    ],
    "wellarchitected:createmilestone": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:createprofileshare": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*"
    ],
    "wellarchitected:createtemplateshare": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:createworkloadshare": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:deleteagentcontext": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:deleteagentgoal": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:deleteagentprofile": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:deletelens": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*"
    ],
    "wellarchitected:deletelensshare": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*"
    ],
    "wellarchitected:deleteprofile": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*"
    ],
    "wellarchitected:deleteprofileshare": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*"
    ],
    "wellarchitected:deletereviewtemplate": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:deletetemplateshare": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:deleteworkload": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:deleteworkloadshare": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:disassociatelenses": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:disassociateprofiles": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:exportlens": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*"
    ],
    "wellarchitected:getagentcontext": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:getagentgoal": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:getagentprofile": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:getagentrecommendation": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-recommendation/.*"
    ],
    "wellarchitected:getagentrecommendationgeneration": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:getanswer": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:getlens": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*"
    ],
    "wellarchitected:getlensreview": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:getlensreviewreport": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:getlensversiondifference": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*"
    ],
    "wellarchitected:getmilestone": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:getprofile": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*"
    ],
    "wellarchitected:getreviewtemplate": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:getreviewtemplateanswer": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:getreviewtemplatelensreview": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:getworkload": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:listagentcontexts": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:listagentgoals": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:listagentrecommendationgenerations": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:listagentrecommendationitems": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-recommendation/.*"
    ],
    "wellarchitected:listagentrecommendations": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:listanswers": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:listcheckdetails": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:listchecksummaries": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:listlensreviewimprovements": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:listlensreviews": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:listlensshares": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*"
    ],
    "wellarchitected:listmilestones": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:listprofileshares": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*"
    ],
    "wellarchitected:listreviewtemplateanswers": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:listtagsforresource": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-recommendation/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:listtemplateshares": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:listworkloadshares": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:putagentrecommendationfeedback": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-recommendation/.*"
    ],
    "wellarchitected:startagentrecommendationgeneration": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:tagresource": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-recommendation/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:untagresource": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-recommendation/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:lens/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:updateagentcontext": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:updateagentgoal": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:updateagentprofile": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-profile/.*"
    ],
    "wellarchitected:updateagentrecommendationstatus": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:agent-recommendation/.*"
    ],
    "wellarchitected:updateanswer": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:updateintegration": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:updatelensreview": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:updateprofile": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*"
    ],
    "wellarchitected:updatereviewtemplate": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:updatereviewtemplateanswer": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:updatereviewtemplatelensreview": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wellarchitected:updateworkload": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:updateworkloadshare": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:upgradelensreview": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:upgradeprofileversion": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/.*",
      "arn:${Partition}:wellarchitected:${Region}:${Account}:workload/.*"
    ],
    "wellarchitected:upgradereviewtemplatelensreview": [
      "arn:${Partition}:wellarchitected:${Region}:${Account}:review-template/.*"
    ],
    "wickr:batchcreateuser": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:batchdeleteuser": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:batchlookupuseruname": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:batchreinviteuser": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:batchresetdevicesforuser": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:batchtoggleusersuspendstatus": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:createadminsession": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:createbot": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:createdataretentionbot": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:createdataretentionbotchallenge": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:createnetwork": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:createsecuritygroup": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:deletebot": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:deletedataretentionbot": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:deletenetwork": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:deletesecuritygroup": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getbot": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getbotscount": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getdataretentionbot": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getguestuserhistorycount": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getnetwork": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getnetworksettings": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getoidcinfo": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getopentdfconfig": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getsecuritygroup": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getuser": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:getuserscount": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:listblockedguestusers": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:listbots": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:listdevicesforuser": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:listguestusers": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:listsecuritygroups": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:listsecuritygroupusers": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:listtagsforresource": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:listusers": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:registeroidcconfig": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:registeroidcconfigtest": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:registeropentdfconfig": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:tagresource": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:untagresource": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:updatebot": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:updatedataretention": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:updateguestuser": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:updatenetworkdetails": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:updatenetworksettings": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:updatesecuritygroup": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wickr:updateuser": [
      "arn:${Partition}:wickr:${Region}:${Account}:network/.*"
    ],
    "wisdom:activatemessagetemplate": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*"
    ],
    "wisdom:createaiagentversion": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-agent/.*"
    ],
    "wisdom:createaiguardrailversion": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-guardrail/.*"
    ],
    "wisdom:createaipromptversion": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-prompt/.*"
    ],
    "wisdom:createcontent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:createcontentassociation": [
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:createmessagetemplate": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:createmessagetemplateattachment": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:createmessagetemplateversion": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:deactivatemessagetemplate": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:deleteaiagent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-agent/.*"
    ],
    "wisdom:deleteaiagentversion": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-agent/.*"
    ],
    "wisdom:deleteaiguardrail": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-guardrail/.*"
    ],
    "wisdom:deleteaiguardrailversion": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-guardrail/.*"
    ],
    "wisdom:deleteaiprompt": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-prompt/.*"
    ],
    "wisdom:deleteaipromptversion": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-prompt/.*"
    ],
    "wisdom:deleteassistant": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*"
    ],
    "wisdom:deleteassistantassociation": [
      "arn:${Partition}:wisdom:${Region}:${Account}:association/.*"
    ],
    "wisdom:deletecontent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:deletecontentassociation": [
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:content-association/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:deleteimportjob": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:deleteknowledgebase": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:deletemessagetemplate": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:deletemessagetemplateattachment": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:deletequickresponse": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:quick-response/.*"
    ],
    "wisdom:getaiagent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-agent/.*"
    ],
    "wisdom:getaiguardrail": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-guardrail/.*"
    ],
    "wisdom:getaiprompt": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-prompt/.*"
    ],
    "wisdom:getassistant": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*"
    ],
    "wisdom:getassistantassociation": [
      "arn:${Partition}:wisdom:${Region}:${Account}:association/.*"
    ],
    "wisdom:getcontent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:getcontentassociation": [
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:content-association/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:getcontentsummary": [
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:getimportjob": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:getknowledgebase": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:getmessagetemplate": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:getnextmessage": [
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:getquickresponse": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:quick-response/.*"
    ],
    "wisdom:getrecommendations": [
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:getsession": [
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:listaiagentversions": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-agent/.*"
    ],
    "wisdom:listaiguardrailversions": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-guardrail/.*"
    ],
    "wisdom:listaipromptversions": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-prompt/.*"
    ],
    "wisdom:listcontentassociations": [
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:listcontents": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:listimportjobs": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:listmessages": [
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:listmessagetemplates": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:listmessagetemplateversions": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:listmodels": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*"
    ],
    "wisdom:listquickresponses": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:listspans": [
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:notifyrecommendationsreceived": [
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:putfeedback": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*"
    ],
    "wisdom:queryassistant": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*"
    ],
    "wisdom:removeassistantaiagent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*"
    ],
    "wisdom:removeknowledgebasetemplateuri": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:rendermessagetemplate": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:retrieve": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*"
    ],
    "wisdom:searchcontent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:searchmessagetemplates": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:searchquickresponses": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:sendmessage": [
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:startcontentupload": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:startimportjob": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:tagresource": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:association/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:content-association/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:quick-response/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:untagresource": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:association/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:content-association/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:quick-response/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:updateaiagent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-agent/.*"
    ],
    "wisdom:updateaiguardrail": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-guardrail/.*"
    ],
    "wisdom:updateaiprompt": [
      "arn:${Partition}:wisdom:${Region}:${Account}:ai-prompt/.*"
    ],
    "wisdom:updateassistantaiagent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:assistant/.*"
    ],
    "wisdom:updatecontent": [
      "arn:${Partition}:wisdom:${Region}:${Account}:content/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:updateknowledgebasetemplateuri": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*"
    ],
    "wisdom:updatemessagetemplate": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:updatemessagetemplatemetadata": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:message-template/.*"
    ],
    "wisdom:updatequickresponse": [
      "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/.*",
      "arn:${Partition}:wisdom:${Region}:${Account}:quick-response/.*"
    ],
    "wisdom:updatesession": [
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "wisdom:updatesessiondata": [
      "arn:${Partition}:wisdom:${Region}:${Account}:session/.*"
    ],
    "workdocs:startinstanceexport": [
      "arn:${Partition}:workdocs:${Region}:${Account}:organization/.*"
    ],
    "worklink:associatedomain": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:associatewebsiteauthorizationprovider": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:associatewebsitecertificateauthority": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:deletefleet": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:describeauditstreamconfiguration": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:describecompanynetworkconfiguration": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:describedevice": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:describedevicepolicyconfiguration": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:describedomain": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:describefleetmetadata": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:describeidentityproviderconfiguration": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:describewebsitecertificateauthority": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:disassociatedomain": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:disassociatewebsiteauthorizationprovider": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:disassociatewebsitecertificateauthority": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:listdevices": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:listdomains": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:listtagsforresource": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:listwebsiteauthorizationproviders": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:listwebsitecertificateauthorities": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:restoredomainaccess": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:revokedomainaccess": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:searchentity": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:signoutuser": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:tagresource": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:untagresource": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:updateauditstreamconfiguration": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:updatecompanynetworkconfiguration": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:updatedevicepolicyconfiguration": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:updatedomainmetadata": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:updatefleetmetadata": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "worklink:updateidentityproviderconfiguration": [
      "arn:${Partition}:worklink::${Account}:fleet/.*"
    ],
    "workmail:allowvendedlogdeliveryforresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:associatedelegatetoresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:associatemembertogroup": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:assumeimpersonationrole": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:cancelmailboxexportjob": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createalias": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createavailabilityconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:creategroup": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createimpersonationrole": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createinboundmailflowrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createmaildomain": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createmobiledeviceaccessrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createoutboundmailflowrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createsmtpgateway": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:createuser": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteaccesscontrolrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deletealias": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteavailabilityconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteemailmonitoringconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deletegroup": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteidentityproviderconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteimpersonationrole": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteinboundmailflowrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deletemailboxpermissions": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deletemaildomain": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deletemobiledevice": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deletemobiledeviceaccessoverride": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deletemobiledeviceaccessrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteorganization": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteoutboundmailflowrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deletepersonalaccesstoken": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteretentionpolicy": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deletesmtpgateway": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deleteuser": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:delivertomailbox": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deregisterfromworkmail": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:deregistermaildomain": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describeemailmonitoringconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describeentity": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describegroup": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describeidentityproviderconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describeinbounddmarcsettings": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describeinboundmailflowrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describemailboxexportjob": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describemaildomains": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describeorganization": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describeoutboundmailflowrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describeresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describesmtpgateway": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:describeuser": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:disassociatedelegatefromresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:disassociatememberfromgroup": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:enablemaildomain": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getaccesscontroleffect": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getdefaultretentionpolicy": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getimpersonationrole": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getimpersonationroleeffect": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getjournalingrules": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getmailboxdetails": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getmaildomain": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getmaildomaindetails": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getmobiledeviceaccesseffect": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getmobiledeviceaccessoverride": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getmobiledevicedetails": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getmobiledevicesforuser": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getmobilepolicydetails": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:getpersonalaccesstokenmetadata": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listaccesscontrolrules": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listaliases": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listavailabilityconfigurations": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listgroupmembers": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listgroups": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listgroupsforentity": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listimpersonationroles": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listinboundmailflowrules": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listmailboxexportjobs": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listmailboxpermissions": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listmaildomains": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listmobiledeviceaccessoverrides": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listmobiledeviceaccessrules": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listoutboundmailflowrules": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listpersonalaccesstokens": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listresourcedelegates": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listresources": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listsmtpgateways": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listtagsforresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:listusers": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:putaccesscontrolrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:putemailmonitoringconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:putidentityproviderconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:putinbounddmarcsettings": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:putmailboxpermissions": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:putmobiledeviceaccessoverride": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:putretentionpolicy": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:registermaildomain": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:registertoworkmail": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:resetpassword": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:searchmembers": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:setdefaultmaildomain": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:setjournalingrules": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:setmobilepolicydetails": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:startmailboxexportjob": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:tagresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:testavailabilityconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:testinboundmailflowrules": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:testoutboundmailflowrules": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:untagresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updateavailabilityconfiguration": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updatedefaultmaildomain": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updategroup": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updateimpersonationrole": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updateinboundmailflowrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updatemailboxquota": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updatemobiledeviceaccessrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updateoutboundmailflowrule": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updateprimaryemailaddress": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updateresource": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updatesmtpgateway": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:updateuser": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmail:wipemobiledevice": [
      "arn:${Partition}:workmail:${Region}:${Account}:organization/.*"
    ],
    "workmailmessageflow:getrawmessagecontent": [
      "arn:${Partition}:workmailmessageflow:${Region}:${Account}:message/.*"
    ],
    "workmailmessageflow:putrawmessagecontent": [
      "arn:${Partition}:workmailmessageflow:${Region}:${Account}:message/.*"
    ],
    "workspaces-instances:associatevolume": [
      "arn:${Partition}:workspaces-instances:${Region}:${Account}:workspaceinstance/.*"
    ],
    "workspaces-instances:deletevolume": [
      "arn:${Partition}:ec2:${Region}:${Account}:volume/.*"
    ],
    "workspaces-instances:deleteworkspaceinstance": [
      "arn:${Partition}:workspaces-instances:${Region}:${Account}:workspaceinstance/.*"
    ],
    "workspaces-instances:disassociatevolume": [
      "arn:${Partition}:workspaces-instances:${Region}:${Account}:workspaceinstance/.*"
    ],
    "workspaces-instances:getworkspaceinstance": [
      "arn:${Partition}:workspaces-instances:${Region}:${Account}:workspaceinstance/.*"
    ],
    "workspaces-instances:listtagsforresource": [
      "arn:${Partition}:workspaces-instances:${Region}:${Account}:workspaceinstance/.*"
    ],
    "workspaces-instances:tagresource": [
      "arn:${Partition}:workspaces-instances:${Region}:${Account}:workspaceinstance/.*"
    ],
    "workspaces-instances:untagresource": [
      "arn:${Partition}:workspaces-instances:${Region}:${Account}:workspaceinstance/.*"
    ],
    "workspaces-web:associatebrowsersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:browserSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:associatedataprotectionsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:dataProtectionSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:associateipaccesssettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:ipAccessSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:associatenetworksettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:networkSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:associatesessionlogger": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:sessionLogger/.*"
    ],
    "workspaces-web:associatetruststore": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:trustStore/.*"
    ],
    "workspaces-web:associateuseraccessloggingsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userAccessLoggingSettings/.*"
    ],
    "workspaces-web:associateusersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userSettings/.*"
    ],
    "workspaces-web:createidentityprovider": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:deletebrowsersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:browserSettings/.*"
    ],
    "workspaces-web:deletedataprotectionsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:dataProtectionSettings/.*"
    ],
    "workspaces-web:deleteidentityprovider": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:deleteipaccesssettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:ipAccessSettings/.*"
    ],
    "workspaces-web:deletenetworksettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:networkSettings/.*"
    ],
    "workspaces-web:deleteportal": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:deletesessionlogger": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:sessionLogger/.*"
    ],
    "workspaces-web:deletetruststore": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:trustStore/.*"
    ],
    "workspaces-web:deleteuseraccessloggingsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userAccessLoggingSettings/.*"
    ],
    "workspaces-web:deleteusersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userSettings/.*"
    ],
    "workspaces-web:disassociatebrowsersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:disassociatedataprotectionsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:disassociateipaccesssettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:disassociatenetworksettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:disassociatesessionlogger": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:disassociatetruststore": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:disassociateuseraccessloggingsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:disassociateusersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:expiresession": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:getbrowsersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:browserSettings/.*"
    ],
    "workspaces-web:getdataprotectionsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:dataProtectionSettings/.*"
    ],
    "workspaces-web:getidentityprovider": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/.*"
    ],
    "workspaces-web:getipaccesssettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:ipAccessSettings/.*"
    ],
    "workspaces-web:getnetworksettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:networkSettings/.*"
    ],
    "workspaces-web:getportal": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:getportalserviceprovidermetadata": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:getsession": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:getsessionlogger": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:sessionLogger/.*"
    ],
    "workspaces-web:gettruststore": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:trustStore/.*"
    ],
    "workspaces-web:gettruststorecertificate": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:trustStore/.*"
    ],
    "workspaces-web:getuseraccessloggingsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userAccessLoggingSettings/.*"
    ],
    "workspaces-web:getusersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userSettings/.*"
    ],
    "workspaces-web:listidentityproviders": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/.*"
    ],
    "workspaces-web:listsessions": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:tagresource": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:browserSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:dataProtectionSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:ipAccessSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:networkSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:sessionLogger/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:trustStore/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userAccessLoggingSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userSettings/.*"
    ],
    "workspaces-web:untagresource": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:browserSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:dataProtectionSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:ipAccessSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:networkSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:sessionLogger/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:trustStore/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userAccessLoggingSettings/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userSettings/.*"
    ],
    "workspaces-web:updatebrowsersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:browserSettings/.*"
    ],
    "workspaces-web:updatedataprotectionsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:dataProtectionSettings/.*"
    ],
    "workspaces-web:updateidentityprovider": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/.*",
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:updateipaccesssettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:ipAccessSettings/.*"
    ],
    "workspaces-web:updatenetworksettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:networkSettings/.*"
    ],
    "workspaces-web:updateportal": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:portal/.*"
    ],
    "workspaces-web:updatesessionlogger": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:sessionLogger/.*"
    ],
    "workspaces-web:updatetruststore": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:trustStore/.*"
    ],
    "workspaces-web:updateuseraccessloggingsettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userAccessLoggingSettings/.*"
    ],
    "workspaces-web:updateusersettings": [
      "arn:${Partition}:workspaces-web:${Region}:${Account}:userSettings/.*"
    ],
    "workspaces:associateconnectionalias": [
      "arn:${Partition}:workspaces:${Region}:${Account}:connectionalias/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:associateipgroups": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceipgroup/.*"
    ],
    "workspaces:associateworkspaceapplication": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceapplication/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:authorizeiprules": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceipgroup/.*"
    ],
    "workspaces:copyworkspaceimage": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/.*"
    ],
    "workspaces:createconnectclientaddin": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:createrootclientcertificate": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacecertificate/.*"
    ],
    "workspaces:createstandbyworkspaces": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:createupdatedworkspaceimage": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/.*"
    ],
    "workspaces:createworkspacebundle": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacebundle/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/.*"
    ],
    "workspaces:createworkspaceimage": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/.*"
    ],
    "workspaces:createworkspaces": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacebundle/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:createworkspacespool": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacebundle/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacespool/.*"
    ],
    "workspaces:deleteclientbranding": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:deleteconnectclientaddin": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:deleteconnectionalias": [
      "arn:${Partition}:workspaces:${Region}:${Account}:connectionalias/.*"
    ],
    "workspaces:deleteipgroup": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceipgroup/.*"
    ],
    "workspaces:deleterootclientcertificate": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacecertificate/.*"
    ],
    "workspaces:deleteworkspacebundle": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacebundle/.*"
    ],
    "workspaces:deleteworkspaceimage": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/.*"
    ],
    "workspaces:deployworkspaceapplications": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:deregisterworkspacedirectory": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:describeapplicationassociations": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceapplication/.*"
    ],
    "workspaces:describebundleassociations": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacebundle/.*"
    ],
    "workspaces:describeclientbranding": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:describeclientproperties": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:describeconnectclientaddins": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:describeconnectionaliaspermissions": [
      "arn:${Partition}:workspaces:${Region}:${Account}:connectionalias/.*"
    ],
    "workspaces:describeimageassociations": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/.*"
    ],
    "workspaces:describeipgroups": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceipgroup/.*"
    ],
    "workspaces:describeworkspaceassociations": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:describeworkspaceimagepermissions": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/.*"
    ],
    "workspaces:describeworkspacesnapshots": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:describeworkspacespoolsessions": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacespool/.*"
    ],
    "workspaces:directoryaccessmanagement": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:disassociateconnectionalias": [
      "arn:${Partition}:workspaces:${Region}:${Account}:connectionalias/.*"
    ],
    "workspaces:disassociateipgroups": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceipgroup/.*"
    ],
    "workspaces:disassociateworkspaceapplication": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceapplication/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:gettroubleshootingrecommendation": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:importclientbranding": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:invoketroubleshootinginvestigation": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:listtroubleshootingrecommendations": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:migrateworkspace": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacebundle/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:modifycertificatebasedauthproperties": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:modifyclientproperties": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:modifyendpointencryptionmode": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:modifysamlproperties": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:modifyselfservicepermissions": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:modifystreamingproperties": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:modifyworkspaceaccessproperties": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:modifyworkspacecreationproperties": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:modifyworkspaceproperties": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:modifyworkspacestate": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:rebootworkspaces": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:rebuildworkspaces": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:registerworkspacedirectory": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:restoreworkspace": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:revokeiprules": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceipgroup/.*"
    ],
    "workspaces:startworkspaces": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:startworkspacespool": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacespool/.*"
    ],
    "workspaces:stopworkspaces": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:stopworkspacespool": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacespool/.*"
    ],
    "workspaces:stream": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:terminateworkspaces": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspace/.*"
    ],
    "workspaces:terminateworkspacespool": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacespool/.*"
    ],
    "workspaces:updateconnectclientaddin": [
      "arn:${Partition}:workspaces:${Region}:${Account}:directory/.*"
    ],
    "workspaces:updateconnectionaliaspermission": [
      "arn:${Partition}:workspaces:${Region}:${Account}:connectionalias/.*"
    ],
    "workspaces:updaterootclientcertificate": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacecertificate/.*"
    ],
    "workspaces:updaterulesofipgroup": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceipgroup/.*"
    ],
    "workspaces:updateworkspacebundle": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacebundle/.*",
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/.*"
    ],
    "workspaces:updateworkspaceimagepermission": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspaceimage/.*"
    ],
    "workspaces:updateworkspacespool": [
      "arn:${Partition}:workspaces:${Region}:${Account}:workspacespool/.*"
    ],
    "xray:creategroup": [
      "arn:${Partition}:xray:${Region}:${Account}:group/.*"
    ],
    "xray:createsamplingrule": [
      "arn:${Partition}:xray:${Region}:${Account}:sampling-rule/.*"
    ],
    "xray:deletegroup": [
      "arn:${Partition}:xray:${Region}:${Account}:group/.*"
    ],
    "xray:deletesamplingrule": [
      "arn:${Partition}:xray:${Region}:${Account}:sampling-rule/.*"
    ],
    "xray:getgroup": [
      "arn:${Partition}:xray:${Region}:${Account}:group/.*"
    ],
    "xray:listtagsforresource": [
      "arn:${Partition}:xray:${Region}:${Account}:group/.*",
      "arn:${Partition}:xray:${Region}:${Account}:sampling-rule/.*"
    ],
    "xray:tagresource": [
      "arn:${Partition}:xray:${Region}:${Account}:group/.*",
      "arn:${Partition}:xray:${Region}:${Account}:sampling-rule/.*"
    ],
    "xray:untagresource": [
      "arn:${Partition}:xray:${Region}:${Account}:group/.*",
      "arn:${Partition}:xray:${Region}:${Account}:sampling-rule/.*"
    ],
    "xray:updategroup": [
      "arn:${Partition}:xray:${Region}:${Account}:group/.*"
    ],
    "xray:updatesamplingrule": [
      "arn:${Partition}:xray:${Region}:${Account}:sampling-rule/.*"
    ]
  }
}