{
  "Name" : "s3express",
  "Actions" : [ {
    "Name" : "CreateAccessPoint",
    "ActionConditionKeys" : [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "s3express:AccessPointNetworkOrigin", "s3express:DataAccessPointAccount", "s3express:DataAccessPointArn", "s3express:LocationName", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "CreateBucket",
    "ActionConditionKeys" : [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "s3express:LocationName", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "CreateSession",
    "ActionConditionKeys" : [ "s3express:AllAccessRestrictedToLocalZoneGroup", "s3express:Permissions", "s3express:ResourceAccount", "s3express:SessionMode", "s3express:TlsVersion", "s3express:authType", "s3express:signatureAge", "s3express:signatureversion", "s3express:x-amz-content-sha256", "s3express:x-amz-server-side-encryption", "s3express:x-amz-server-side-encryption-aws-kms-key-id" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint",
      "ConditionKeys" : [ "s3express:Permissions" ]
    }, {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteAccessPoint",
    "ActionConditionKeys" : [ "s3express:AccessPointNetworkOrigin", "s3express:DataAccessPointAccount", "s3express:DataAccessPointArn", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteAccessPointPolicy",
    "ActionConditionKeys" : [ "s3express:AccessPointNetworkOrigin", "s3express:DataAccessPointAccount", "s3express:DataAccessPointArn", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteAccessPointScope",
    "ActionConditionKeys" : [ "s3express:AccessPointNetworkOrigin", "s3express:DataAccessPointAccount", "s3express:DataAccessPointArn", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteBucket",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "DeleteBucketPolicy",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetAccessPoint",
    "ActionConditionKeys" : [ "s3express:AccessPointNetworkOrigin", "s3express:DataAccessPointAccount", "s3express:DataAccessPointArn", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetAccessPointPolicy",
    "ActionConditionKeys" : [ "s3express:AccessPointNetworkOrigin", "s3express:DataAccessPointAccount", "s3express:DataAccessPointArn", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetAccessPointScope",
    "ActionConditionKeys" : [ "s3express:AccessPointNetworkOrigin", "s3express:DataAccessPointAccount", "s3express:DataAccessPointArn", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetBucketPolicy",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetEncryptionConfiguration",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetInventoryConfiguration",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetLifecycleConfiguration",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "GetMetricsConfiguration",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListAccessPointsForDirectoryBuckets",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListAllMyDirectoryBuckets",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ListTagsForResource",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    }, {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "PutAccessPointPolicy",
    "ActionConditionKeys" : [ "s3express:AccessPointNetworkOrigin", "s3express:DataAccessPointAccount", "s3express:DataAccessPointArn", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "PutAccessPointScope",
    "ActionConditionKeys" : [ "s3express:AccessPointNetworkOrigin", "s3express:DataAccessPointAccount", "s3express:DataAccessPointArn", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "PutBucketPolicy",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "PutEncryptionConfiguration",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "PutInventoryConfiguration",
    "ActionConditionKeys" : [ "s3express:InventoryAccessibleOptionalFields", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "PutLifecycleConfiguration",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "PutMetricsConfiguration",
    "ActionConditionKeys" : [ "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "TagResource",
    "ActionConditionKeys" : [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : true,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    }, {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "UntagResource",
    "ActionConditionKeys" : [ "aws:TagKeys", "s3express:ResourceAccount", "s3express:TlsVersion", "s3express:authType", "s3express:signatureversion", "s3express:x-amz-content-sha256" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : true,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "accesspoint"
    }, {
      "Name" : "bucket"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  } ],
  "ConditionKeys" : [ {
    "Name" : "aws:RequestTag/${TagKey}",
    "Types" : [ "String" ]
  }, {
    "Name" : "aws:ResourceTag/${TagKey}",
    "Types" : [ "String" ]
  }, {
    "Name" : "aws:TagKeys",
    "Types" : [ "ArrayOfString" ]
  }, {
    "Name" : "s3express:AccessPointNetworkOrigin",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:AccessPointTag/${TagKey}",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:AllAccessRestrictedToLocalZoneGroup",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:BucketTag/${TagKey}",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:DataAccessPointAccount",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:DataAccessPointArn",
    "Types" : [ "ARN" ]
  }, {
    "Name" : "s3express:InventoryAccessibleOptionalFields",
    "Types" : [ "ArrayOfString" ]
  }, {
    "Name" : "s3express:LocationName",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:Permissions",
    "Types" : [ "ArrayOfString" ]
  }, {
    "Name" : "s3express:ResourceAccount",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:SessionMode",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:TlsVersion",
    "Types" : [ "Numeric" ]
  }, {
    "Name" : "s3express:authType",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:signatureAge",
    "Types" : [ "Numeric" ]
  }, {
    "Name" : "s3express:signatureversion",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:x-amz-content-sha256",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:x-amz-server-side-encryption",
    "Types" : [ "String" ]
  }, {
    "Name" : "s3express:x-amz-server-side-encryption-aws-kms-key-id",
    "Types" : [ "ARN" ]
  } ],
  "Resources" : [ {
    "Name" : "accesspoint",
    "ARNFormats" : [ "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/${AccessPointName}" ],
    "ConditionKeys" : [ "aws:ResourceTag/${TagKey}", "s3express:AccessPointTag/${TagKey}" ]
  }, {
    "Name" : "bucket",
    "ARNFormats" : [ "arn:${Partition}:s3express:${Region}:${Account}:bucket/${BucketName}" ],
    "ConditionKeys" : [ "aws:ResourceTag/${TagKey}", "s3express:BucketTag/${TagKey}" ]
  } ],
  "Version" : "v1.4"
}