{
  "Name" : "secretsmanager",
  "Actions" : [ {
    "Name" : "BatchGetSecretValue",
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : false,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "CancelRotateSecret",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "CreateSecret",
    "ActionConditionKeys" : [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys", "secretsmanager:AddReplicaRegions", "secretsmanager:Description", "secretsmanager:ForceOverwriteReplicaSecret", "secretsmanager:KmsKeyArn", "secretsmanager:KmsKeyId", "secretsmanager:Name", "secretsmanager:ResourceTag/tag-key", "secretsmanager:Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "DeleteResourcePolicy",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "DeleteSecret",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ForceDeleteWithoutRecovery", "secretsmanager:RecoveryWindowInDays", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "DescribeSecret",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "GetRandomPassword",
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "GetResourcePolicy",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "GetSecretValue",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:VersionId", "secretsmanager:VersionStage", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "ListSecretVersionIds",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "ListSecrets",
    "Annotations" : {
      "Properties" : {
        "IsList" : true,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : false
      }
    },
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "PutResourcePolicy",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:BlockPublicPolicy", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "PutSecretValue",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "RemoveRegionsFromReplication",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "ReplicateSecretToRegions",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:AddReplicaRegions", "secretsmanager:ForceOverwriteReplicaSecret", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "RestoreSecret",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "RotateSecret",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ExternalSecretRotationRoleArn", "secretsmanager:ModifyRotationRules", "secretsmanager:ResourceTag/tag-key", "secretsmanager:RotateImmediately", "secretsmanager:RotationLambdaARN", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "StopReplicationToReplica",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "TagResource",
    "ActionConditionKeys" : [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : true,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "UntagResource",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "aws:TagKeys", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : true,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "UpdateSecret",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:Description", "secretsmanager:KmsKeyArn", "secretsmanager:KmsKeyId", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:Type", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  }, {
    "Name" : "UpdateSecretVersionStage",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:VersionStage", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : false,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : false
    }
  }, {
    "Name" : "ValidateResourcePolicy",
    "ActionConditionKeys" : [ "aws:ResourceTag/${TagKey}", "secretsmanager:ResourceTag/tag-key", "secretsmanager:SecretId", "secretsmanager:SecretPrimaryRegion", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ],
    "Annotations" : {
      "Properties" : {
        "IsList" : false,
        "IsPermissionManagement" : true,
        "IsTaggingOnly" : false,
        "IsWrite" : true
      }
    },
    "Resources" : [ {
      "Name" : "Secret"
    } ],
    "SupportedBy" : {
      "IAM Access Analyzer Policy Generation" : true,
      "IAM Action Last Accessed" : true
    }
  } ],
  "ConditionKeys" : [ {
    "Name" : "aws:RequestTag/${TagKey}",
    "Types" : [ "String" ]
  }, {
    "Name" : "aws:ResourceTag/${TagKey}",
    "Types" : [ "String" ]
  }, {
    "Name" : "aws:TagKeys",
    "Types" : [ "ArrayOfString" ]
  }, {
    "Name" : "secretsmanager:AddReplicaRegions",
    "Types" : [ "ArrayOfString" ]
  }, {
    "Name" : "secretsmanager:BlockPublicPolicy",
    "Types" : [ "Bool" ]
  }, {
    "Name" : "secretsmanager:Description",
    "Types" : [ "String" ]
  }, {
    "Name" : "secretsmanager:ExternalSecretRotationRoleArn",
    "Types" : [ "ARN" ]
  }, {
    "Name" : "secretsmanager:ForceDeleteWithoutRecovery",
    "Types" : [ "Bool" ]
  }, {
    "Name" : "secretsmanager:ForceOverwriteReplicaSecret",
    "Types" : [ "Bool" ]
  }, {
    "Name" : "secretsmanager:KmsKeyArn",
    "Types" : [ "ARN" ]
  }, {
    "Name" : "secretsmanager:KmsKeyId",
    "Types" : [ "String" ]
  }, {
    "Name" : "secretsmanager:ModifyRotationRules",
    "Types" : [ "Bool" ]
  }, {
    "Name" : "secretsmanager:Name",
    "Types" : [ "String" ]
  }, {
    "Name" : "secretsmanager:RecoveryWindowInDays",
    "Types" : [ "Numeric" ]
  }, {
    "Name" : "secretsmanager:ResourceTag/tag-key",
    "Types" : [ "String" ]
  }, {
    "Name" : "secretsmanager:RotateImmediately",
    "Types" : [ "Bool" ]
  }, {
    "Name" : "secretsmanager:RotationLambdaARN",
    "Types" : [ "ARN" ]
  }, {
    "Name" : "secretsmanager:SecretId",
    "Types" : [ "ARN" ]
  }, {
    "Name" : "secretsmanager:SecretPrimaryRegion",
    "Types" : [ "String" ]
  }, {
    "Name" : "secretsmanager:Type",
    "Types" : [ "String" ]
  }, {
    "Name" : "secretsmanager:VersionId",
    "Types" : [ "String" ]
  }, {
    "Name" : "secretsmanager:VersionStage",
    "Types" : [ "String" ]
  }, {
    "Name" : "secretsmanager:resource/AllowRotationLambdaArn",
    "Types" : [ "ARN" ]
  }, {
    "Name" : "secretsmanager:resource/Type",
    "Types" : [ "String" ]
  } ],
  "Operations" : [ {
    "Name" : "BatchGetSecretValue",
    "AuthorizedActions" : [ {
      "Name" : "BatchGetSecretValue",
      "Service" : "secretsmanager"
    }, {
      "Name" : "GetSecretValue",
      "Service" : "secretsmanager"
    }, {
      "Name" : "ListSecrets",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "batch_get_secret_value",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "CancelRotateSecret",
    "AuthorizedActions" : [ {
      "Name" : "CancelRotateSecret",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "cancel_rotate_secret",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "CreateSecret",
    "AuthorizedActions" : [ {
      "Name" : "CreateSecret",
      "Service" : "secretsmanager"
    }, {
      "Name" : "ReplicateSecretToRegions",
      "Service" : "secretsmanager"
    }, {
      "Name" : "TagResource",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "create_secret",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DeleteResourcePolicy",
    "AuthorizedActions" : [ {
      "Name" : "DeleteResourcePolicy",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "delete_resource_policy",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DeleteSecret",
    "AuthorizedActions" : [ {
      "Name" : "DeleteSecret",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "delete_secret",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "DescribeSecret",
    "AuthorizedActions" : [ {
      "Name" : "DescribeSecret",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "describe_secret",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "GetRandomPassword",
    "AuthorizedActions" : [ {
      "Name" : "GetRandomPassword",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "get_random_password",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "GetResourcePolicy",
    "AuthorizedActions" : [ {
      "Name" : "GetResourcePolicy",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "get_resource_policy",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "GetSecretValue",
    "AuthorizedActions" : [ {
      "Name" : "GetSecretValue",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "get_secret_value",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListSecretVersionIds",
    "AuthorizedActions" : [ {
      "Name" : "ListSecretVersionIds",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "list_secret_version_ids",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ListSecrets",
    "AuthorizedActions" : [ {
      "Name" : "ListSecrets",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "list_secrets",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "PutResourcePolicy",
    "AuthorizedActions" : [ {
      "Name" : "PutResourcePolicy",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "put_resource_policy",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "PutSecretValue",
    "AuthorizedActions" : [ {
      "Name" : "PutSecretValue",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "put_secret_value",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "RemoveRegionsFromReplication",
    "AuthorizedActions" : [ {
      "Name" : "RemoveRegionsFromReplication",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "remove_regions_from_replication",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ReplicateSecretToRegions",
    "AuthorizedActions" : [ {
      "Name" : "ReplicateSecretToRegions",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "replicate_secret_to_regions",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "RestoreSecret",
    "AuthorizedActions" : [ {
      "Name" : "RestoreSecret",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "restore_secret",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "RotateSecret",
    "AuthorizedActions" : [ {
      "Name" : "PassRole",
      "Context" : {
        "iam:PassedToService" : [ "secretsmanager.amazonaws.com" ]
      },
      "Service" : "iam"
    }, {
      "Name" : "RotateSecret",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "rotate_secret",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "StopReplicationToReplica",
    "AuthorizedActions" : [ {
      "Name" : "StopReplicationToReplica",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "stop_replication_to_replica",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "TagResource",
    "AuthorizedActions" : [ {
      "Name" : "TagResource",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "tag_resource",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "UntagResource",
    "AuthorizedActions" : [ {
      "Name" : "UntagResource",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "untag_resource",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "UpdateSecret",
    "AuthorizedActions" : [ {
      "Name" : "UpdateSecret",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "update_secret",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "UpdateSecretVersionStage",
    "AuthorizedActions" : [ {
      "Name" : "UpdateSecretVersionStage",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "update_secret_version_stage",
      "Package" : "Boto3"
    } ]
  }, {
    "Name" : "ValidateResourcePolicy",
    "AuthorizedActions" : [ {
      "Name" : "PutResourcePolicy",
      "Service" : "secretsmanager"
    }, {
      "Name" : "ValidateResourcePolicy",
      "Service" : "secretsmanager"
    } ],
    "SDK" : [ {
      "Name" : "secretsmanager",
      "Method" : "validate_resource_policy",
      "Package" : "Boto3"
    } ]
  } ],
  "Resources" : [ {
    "Name" : "Secret",
    "ARNFormats" : [ "arn:${Partition}:secretsmanager:${Region}:${Account}:secret:${SecretId}" ],
    "ConditionKeys" : [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys", "secretsmanager:ResourceTag/tag-key", "secretsmanager:resource/AllowRotationLambdaArn", "secretsmanager:resource/Type" ]
  } ],
  "Version" : "v1.4"
}