aws-iam-policy-types/dist/esm/actions/workmail.d.ts

Autogenerated Typescript types for AWS IAM Policy and enums for all policy actions

/**
 * All IAM policy actions for Amazon WorkMail (WORKMAIL)
 *
 * Extracted by `aws-iam-policy` from
 * https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkmail.html
 *
 * 2025-02-24T21:50:10.572Z
 */
export declare enum AwsWorkmailActions {
    /**
     * Grants permission to configure vended log delivery for WorkMail audit logs
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/audit-logging.html
     */
    AllowVendedLogDeliveryForResource = "workmail:AllowVendedLogDeliveryForResource",
    /**
     * Grants permission to add a member (user or group) to the resource's set of dele
     * gates
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_AssociateDelegateToResource.html
     */
    AssociateDelegateToResource = "workmail:AssociateDelegateToResource",
    /**
     * Grants permission to add a member (user or group) to the group's set
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_AssociateMemberToGroup.html
     */
    AssociateMemberToGroup = "workmail:AssociateMemberToGroup",
    /**
     * Grants permission to assume an impersonation role for the given Amazon WorkMail
     * organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_AssumeImpersonationRole.html
     */
    AssumeImpersonationRole = "workmail:AssumeImpersonationRole",
    /**
     * Grants permission to cancel a currently running mailbox export job
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CancelMailboxExportJob.html
     */
    CancelMailboxExportJob = "workmail:CancelMailboxExportJob",
    /**
     * Grants permission to add an alias to the set of a given member (user or group)
     * of WorkMail
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateAlias.html
     */
    CreateAlias = "workmail:CreateAlias",
    /**
     * Grants permission to create an AvailabilityConfiguration for the given Amazon W
     * orkMail organization and domain
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateAvailabilityConfiguration.html
     */
    CreateAvailabilityConfiguration = "workmail:CreateAvailabilityConfiguration",
    /**
     * Grants permission to create a group that can be used in WorkMail by calling the
     * RegisterToWorkMail operation
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateGroup.html
     */
    CreateGroup = "workmail:CreateGroup",
    /**
     * Grants permission to create an Identity Center application for WorkMail
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateIdentityCenterApplication.html
     */
    CreateIdentityCenterApplication = "workmail:CreateIdentityCenterApplication",
    /**
     * Grants permission to create an impersonation role for the given Amazon WorkMail
     * organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateImpersonationRole.html
     */
    CreateImpersonationRole = "workmail:CreateImpersonationRole",
    /**
     * Grants permission to create an inbound email flow rule which will apply to all
     * email sent to an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/create-email-rules.html
     */
    CreateInboundMailFlowRule = "workmail:CreateInboundMailFlowRule",
    /**
     * Grants permission to create a mail domain
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.html
     */
    CreateMailDomain = "workmail:CreateMailDomain",
    /**
     * Grants permission to create a new mobile device access rule
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateMobileDeviceAccessRule.html
     */
    CreateMobileDeviceAccessRule = "workmail:CreateMobileDeviceAccessRule",
    /**
     * Grants permission to create a new Amazon WorkMail organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateOrganization.html
     */
    CreateOrganization = "workmail:CreateOrganization",
    /**
     * Grants permission to create an outbound email flow rule which will apply to all
     * email sent from an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/create-email-rules.html
     */
    CreateOutboundMailFlowRule = "workmail:CreateOutboundMailFlowRule",
    /**
     * Grants permission to create a new WorkMail resource
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateResource.html
     */
    CreateResource = "workmail:CreateResource",
    /**
     * Grants permission to register an SMTP gateway to a WorkMail organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html
     */
    CreateSmtpGateway = "workmail:CreateSmtpGateway",
    /**
     * Grants permission to create a user, which can be enabled afterwards by calling
     * the RegisterToWorkMail operation
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateUser.html
     */
    CreateUser = "workmail:CreateUser",
    /**
     * Grants permission to delete an access control rule
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteAccessControlRule.html
     */
    DeleteAccessControlRule = "workmail:DeleteAccessControlRule",
    /**
     * Grants permission to remove one or more specified aliases from a set of aliases
     * for a given user
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteAlias.html
     */
    DeleteAlias = "workmail:DeleteAlias",
    /**
     * Grants permission to delete the AvailabilityConfiguration for the given Amazon
     * WorkMail organization and domain
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteAvailabilityConfiguration.html
     */
    DeleteAvailabilityConfiguration = "workmail:DeleteAvailabilityConfiguration",
    /**
     * Grants permission to delete the email monitoring configuration for an organizat
     * ion
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteEmailMonitoringConfiguration.html
     */
    DeleteEmailMonitoringConfiguration = "workmail:DeleteEmailMonitoringConfiguration",
    /**
     * Grants permission to delete a group from WorkMail
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteGroup.html
     */
    DeleteGroup = "workmail:DeleteGroup",
    /**
     * Grants permission to delete an Identity Center application for WorkMail
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteIdentityCenterApplication.html
     */
    DeleteIdentityCenterApplication = "workmail:DeleteIdentityCenterApplication",
    /**
     * Grants permission to delete the identity provider configuration for the organiz
     * ation
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteIdentityProviderConfiguration.html
     */
    DeleteIdentityProviderConfiguration = "workmail:DeleteIdentityProviderConfiguration",
    /**
     * Grants permission to delete an impersonation role for the given Amazon WorkMail
     * organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteImpersonationRole.html
     */
    DeleteImpersonationRole = "workmail:DeleteImpersonationRole",
    /**
     * Grants permission to remove an inbound email flow rule to no longer apply to em
     * ails sent to an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/remove-email-flow-rule.html
     */
    DeleteInboundMailFlowRule = "workmail:DeleteInboundMailFlowRule",
    /**
     * Grants permission to remove an unused mail domain from an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/remove_domain.html
     */
    DeleteMailDomain = "workmail:DeleteMailDomain",
    /**
     * Grants permission to delete permissions granted to a member (user or group)
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteMailboxPermissions.html
     */
    DeleteMailboxPermissions = "workmail:DeleteMailboxPermissions",
    /**
     * Grants permission to remove a mobile device from a user
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html#remove_mobile_device
     */
    DeleteMobileDevice = "workmail:DeleteMobileDevice",
    /**
     * Grants permission to delete a mobile device access override
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteMobileDeviceAccessOverride.html
     */
    DeleteMobileDeviceAccessOverride = "workmail:DeleteMobileDeviceAccessOverride",
    /**
     * Grants permission to delete a mobile device access rule
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteMobileDeviceAccessRule.html
     */
    DeleteMobileDeviceAccessRule = "workmail:DeleteMobileDeviceAccessRule",
    /**
     * Grants permission to delete an Amazon WorkMail organization and all underlying
     * AWS resources managed by Amazon WorkMail as part of the organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteOrganization.html
     */
    DeleteOrganization = "workmail:DeleteOrganization",
    /**
     * Grants permission to remove an outbound email flow rule so that it no longer ap
     * plies to emails sent from an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/remove-email-flow-rule.html
     */
    DeleteOutboundMailFlowRule = "workmail:DeleteOutboundMailFlowRule",
    /**
     * Grants permission to delete a personal access token
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeletePersonalAccessToken.html
     */
    DeletePersonalAccessToken = "workmail:DeletePersonalAccessToken",
    /**
     * Grants permission to delete the specified resource
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteResource.html
     */
    DeleteResource = "workmail:DeleteResource",
    /**
     * Grants permission to delete the retention policy based on the supplied organiza
     * tion and policy identifiers
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteRetentionPolicy.html
     */
    DeleteRetentionPolicy = "workmail:DeleteRetentionPolicy",
    /**
     * Grants permission to remove an SMTP gateway from an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html
     */
    DeleteSmtpGateway = "workmail:DeleteSmtpGateway",
    /**
     * Grants permission to delete a user from WorkMail and all subsequent systems
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteUser.html
     */
    DeleteUser = "workmail:DeleteUser",
    /**
     * Grants permission to deliver emails to a WorkMail organization via the SES Mail
     * Manager DeliverToMailbox action
     *
     * See https://docs.aws.amazon.com/sesmailmanager/latest/APIReference/API_DeliverToMailboxAction.html
     */
    DeliverToMailbox = "workmail:DeliverToMailbox",
    /**
     * Grants permission to mark a user, group, or resource as no longer used in WorkM
     * ail
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeregisterFromWorkMail.html
     */
    DeregisterFromWorkMail = "workmail:DeregisterFromWorkMail",
    /**
     * Grants permission to deregister a mail domain from an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DeregisterMailDomain.html
     */
    DeregisterMailDomain = "workmail:DeregisterMailDomain",
    /**
     * Grants permission to retrieve the email monitoring configuration for an organiz
     * ation
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeEmailMonitoringConfiguration.html
     */
    DescribeEmailMonitoringConfiguration = "workmail:DescribeEmailMonitoringConfiguration",
    /**
     * Grants permission to read details of an entity
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeEntity.html
     */
    DescribeEntity = "workmail:DescribeEntity",
    /**
     * Grants permission to read the details for a group
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeGroup.html
     */
    DescribeGroup = "workmail:DescribeGroup",
    /**
     * Grants permission to read the identity provider configuration for the organizat
     * ion
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeIdentityProviderConfiguration.html
     */
    DescribeIdentityProviderConfiguration = "workmail:DescribeIdentityProviderConfiguration",
    /**
     * Grants permission to read the settings in a DMARC policy for a specified organi
     * zation
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeInboundDmarcSettings.html
     */
    DescribeInboundDmarcSettings = "workmail:DescribeInboundDmarcSettings",
    /**
     * Grants permission to read the details of an inbound mail flow rule configured f
     * or an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-actions
     */
    DescribeInboundMailFlowRule = "workmail:DescribeInboundMailFlowRule",
    /**
     * Grants permission to show the details of all mail domains associated with the o
     * rganization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/domains_overview.html
     */
    DescribeMailDomains = "workmail:DescribeMailDomains",
    /**
     * Grants permission to retrieve details of a mailbox export job
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeMailboxExportJob.html
     */
    DescribeMailboxExportJob = "workmail:DescribeMailboxExportJob",
    /**
     * Grants permission to read details of an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeOrganization.html
     */
    DescribeOrganization = "workmail:DescribeOrganization",
    /**
     * Grants permission to read the details of an outbound mail flow rule configured
     * for an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-outbound
     */
    DescribeOutboundMailFlowRule = "workmail:DescribeOutboundMailFlowRule",
    /**
     * Grants permission to read the details for a resource
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeResource.html
     */
    DescribeResource = "workmail:DescribeResource",
    /**
     * Grants permission to read the details of an SMTP gateway registered to an organ
     * ization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html
     */
    DescribeSmtpGateway = "workmail:DescribeSmtpGateway",
    /**
     * Grants permission to read details for a user
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeUser.html
     */
    DescribeUser = "workmail:DescribeUser",
    /**
     * Grants permission to remove a member from the resource's set of delegates
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DisassociateDelegateFromResource.html
     */
    DisassociateDelegateFromResource = "workmail:DisassociateDelegateFromResource",
    /**
     * Grants permission to remove a member from a group
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_DisassociateMemberFromGroup.html
     */
    DisassociateMemberFromGroup = "workmail:DisassociateMemberFromGroup",
    /**
     * Grants permission to enable a mail domain in the organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.html
     */
    EnableMailDomain = "workmail:EnableMailDomain",
    /**
     * Grants permission to get the effects of access control rules as they apply to a
     * specified IPv4 address, access protocol action, or user ID
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetAccessControlEffect.html
     */
    GetAccessControlEffect = "workmail:GetAccessControlEffect",
    /**
     * Grants permission to retrieve the retention policy associated at an organizatio
     * nal level
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetDefaultRetentionPolicy.html
     */
    GetDefaultRetentionPolicy = "workmail:GetDefaultRetentionPolicy",
    /**
     * Grants permission to retrieve an impersonation role for the given Amazon WorkMa
     * il organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetImpersonationRole.html
     */
    GetImpersonationRole = "workmail:GetImpersonationRole",
    /**
     * Grants permission to get the effect of the rules associated to an impersonation
     * role for a specific user
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetImpersonationRoleEffect.html
     */
    GetImpersonationRoleEffect = "workmail:GetImpersonationRoleEffect",
    /**
     * Grants permission to read the configured journaling and fallback email addresse
     * s for email journaling
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/journaling_overview.html
     */
    GetJournalingRules = "workmail:GetJournalingRules",
    /**
     * Grants permission to retrieve details of a given mail domain in an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMailDomain.html
     */
    GetMailDomain = "workmail:GetMailDomain",
    /**
     * Grants permission to get the details of the mail domain
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/domains_overview.html
     */
    GetMailDomainDetails = "workmail:GetMailDomainDetails",
    /**
     * Grants permission to read the details of the user's mailbox
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMailboxDetails.html
     */
    GetMailboxDetails = "workmail:GetMailboxDetails",
    /**
     * Grants permission to simulate the effect of the mobile device access rules for
     * the given attributes of a sample access event
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMobileDeviceAccessEffect.html
     */
    GetMobileDeviceAccessEffect = "workmail:GetMobileDeviceAccessEffect",
    /**
     * Grants permission to retrieve a mobile device access override
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetMobileDeviceAccessOverride.html
     */
    GetMobileDeviceAccessOverride = "workmail:GetMobileDeviceAccessOverride",
    /**
     * Grants permission to get the details of the mobile device
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html
     */
    GetMobileDeviceDetails = "workmail:GetMobileDeviceDetails",
    /**
     * Grants permission to get a list of the mobile devices associated with the user
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html
     */
    GetMobileDevicesForUser = "workmail:GetMobileDevicesForUser",
    /**
     * Grants permission to get the details of the mobile device policy associated wit
     * h the organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/edit_organization_mobile_policy.html
     */
    GetMobilePolicyDetails = "workmail:GetMobilePolicyDetails",
    /**
     * Grants permission to read metadata for a personal access token
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_GetPersonalAccessTokenMetadata.html
     */
    GetPersonalAccessTokenMetadata = "workmail:GetPersonalAccessTokenMetadata",
    /**
     * Grants permission to list the access control rules
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListAccessControlRules.html
     */
    ListAccessControlRules = "workmail:ListAccessControlRules",
    /**
     * Grants permission to list the aliases associated with a given entity
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListAliases.html
     */
    ListAliases = "workmail:ListAliases",
    /**
     * Grants permission to list all the AvailabilityConfiguration's for the given Ama
     * zon WorkMail organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListAvailabilityConfigurations.html
     */
    ListAvailabilityConfigurations = "workmail:ListAvailabilityConfigurations",
    /**
     * Grants permission to read an overview of the members of a group. Users and grou
     * ps can be members of a group
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroupMembers.html
     */
    ListGroupMembers = "workmail:ListGroupMembers",
    /**
     * Grants permission to list summaries of the organization's groups
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroups.html
     */
    ListGroups = "workmail:ListGroups",
    /**
     * Grants permission to list the groups to which an entity belongs
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroupsForEntity.html
     */
    ListGroupsForEntity = "workmail:ListGroupsForEntity",
    /**
     * Grants permission to list the impersonation roles for the given Amazon WorkMail
     * organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListImpersonationRoles.html
     */
    ListImpersonationRoles = "workmail:ListImpersonationRoles",
    /**
     * Grants permission to list inbound mail flow rules configured for an organizatio
     * n
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-actions
     */
    ListInboundMailFlowRules = "workmail:ListInboundMailFlowRules",
    /**
     * Grants permission to list the mail domains for a given organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMailDomains.html
     */
    ListMailDomains = "workmail:ListMailDomains",
    /**
     * Grants permission to list mailbox export jobs
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMailboxExportJobs.html
     */
    ListMailboxExportJobs = "workmail:ListMailboxExportJobs",
    /**
     * Grants permission to list the mailbox permissions associated with a user, group
     * , or resource mailbox
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMailboxPermissions.html
     */
    ListMailboxPermissions = "workmail:ListMailboxPermissions",
    /**
     * Grants permission to list the mobile device access overrides
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMobileDeviceAccessOverrides.html
     */
    ListMobileDeviceAccessOverrides = "workmail:ListMobileDeviceAccessOverrides",
    /**
     * Grants permission to list the mobile device access rules
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListMobileDeviceAccessRules.html
     */
    ListMobileDeviceAccessRules = "workmail:ListMobileDeviceAccessRules",
    /**
     * Grants permission to list the non-deleted organizations
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListOrganizations.html
     */
    ListOrganizations = "workmail:ListOrganizations",
    /**
     * Grants permission to list outbound mail flow rules configured for an organizati
     * on
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-outbound
     */
    ListOutboundMailFlowRules = "workmail:ListOutboundMailFlowRules",
    /**
     * Grants permission to list metadata for personal access tokens
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListPersonalAccessTokens.html
     */
    ListPersonalAccessTokens = "workmail:ListPersonalAccessTokens",
    /**
     * Grants permission to list the delegates associated with a resource
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListResourceDelegates.html
     */
    ListResourceDelegates = "workmail:ListResourceDelegates",
    /**
     * Grants permission to list the organization's resources
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListResources.html
     */
    ListResources = "workmail:ListResources",
    /**
     * Grants permission to list SMTP gateways registered to the organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html
     */
    ListSmtpGateways = "workmail:ListSmtpGateways",
    /**
     * Grants permission to list the tags applied to an Amazon WorkMail organization r
     * esource
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListTagsForResource.html
     */
    ListTagsForResource = "workmail:ListTagsForResource",
    /**
     * Grants permission to list the organization's users
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListUsers.html
     */
    ListUsers = "workmail:ListUsers",
    /**
     * Grants permission to add a new access control rule
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutAccessControlRule.html
     */
    PutAccessControlRule = "workmail:PutAccessControlRule",
    /**
     * Grants permission to add or update the email monitoring configuration for an or
     * ganization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutEmailMonitoringConfiguration.html
     */
    PutEmailMonitoringConfiguration = "workmail:PutEmailMonitoringConfiguration",
    /**
     * Grants permission to add or update the identity provider configuration for the
     * organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutIdentityProviderConfiguration.html
     */
    PutIdentityProviderConfiguration = "workmail:PutIdentityProviderConfiguration",
    /**
     * Grants permission to enable or disable a DMARC policy for a given organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutInboundDmarcSettings.html
     */
    PutInboundDmarcSettings = "workmail:PutInboundDmarcSettings",
    /**
     * Grants permission to set permissions for a user, group, or resource, replacing
     * any existing permissions
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutMailboxPermissions.html
     */
    PutMailboxPermissions = "workmail:PutMailboxPermissions",
    /**
     * Grants permission to add or update a mobile device access override
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutMobileDeviceAccessOverride.html
     */
    PutMobileDeviceAccessOverride = "workmail:PutMobileDeviceAccessOverride",
    /**
     * Grants permission to add or update the retention policy
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_PutRetentionPolicy.html
     */
    PutRetentionPolicy = "workmail:PutRetentionPolicy",
    /**
     * Grants permission to register a new mail domain in an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_RegisterMailDomain.html
     */
    RegisterMailDomain = "workmail:RegisterMailDomain",
    /**
     * Grants permission to register an existing and disabled user, group, or resource
     * for use by associating a mailbox and calendaring capabilities
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_RegisterToWorkMail.html
     */
    RegisterToWorkMail = "workmail:RegisterToWorkMail",
    /**
     * Grants permission to allow the administrator to reset the password for a user
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_ResetPassword.html
     */
    ResetPassword = "workmail:ResetPassword",
    /**
     * Grants permission to perform a prefix search to find a specific user in a mail
     * group
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/groups_overview.html
     */
    SearchMembers = "workmail:SearchMembers",
    /**
     * Grants permission to set the default mail domain for the organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/default_domain.html
     */
    SetDefaultMailDomain = "workmail:SetDefaultMailDomain",
    /**
     * Grants permission to set journaling and fallback email addresses for email jour
     * naling
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/journaling_overview.html
     */
    SetJournalingRules = "workmail:SetJournalingRules",
    /**
     * Grants permission to set the details of a mobile policy associated with the org
     * anization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/edit_organization_mobile_policy.html
     */
    SetMobilePolicyDetails = "workmail:SetMobilePolicyDetails",
    /**
     * Grants permission to start a new mailbox export job
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_StartMailboxExportJob.html
     */
    StartMailboxExportJob = "workmail:StartMailboxExportJob",
    /**
     * Grants permission to tag the specified Amazon WorkMail organization resource
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_TagResource.html
     */
    TagResource = "workmail:TagResource",
    /**
     * Grants permission to performs a test on an availability provider to ensure that
     * access is allowed
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_TestAvailabilityConfiguration.html
     */
    TestAvailabilityConfiguration = "workmail:TestAvailabilityConfiguration",
    /**
     * Grants permission to test what inbound rules will apply to an email with a give
     * n sender and recipient
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/test-email-flow-rule.html
     */
    TestInboundMailFlowRules = "workmail:TestInboundMailFlowRules",
    /**
     * Grants permission to test what outbound rules will apply to an email with a giv
     * en sender and recipient
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/test-email-flow-rule.html
     */
    TestOutboundMailFlowRules = "workmail:TestOutboundMailFlowRules",
    /**
     * Grants permission to untag the specified Amazon WorkMail organization resource
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UntagResource.html
     */
    UntagResource = "workmail:UntagResource",
    /**
     * Grants permission to update an existing AvailabilityConfiguration for the given
     * Amazon WorkMail organization and domain
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateAvailabilityConfiguration.html
     */
    UpdateAvailabilityConfiguration = "workmail:UpdateAvailabilityConfiguration",
    /**
     * Grants permission to update which domain is the default domain for an organizat
     * ion
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateDefaultMailDomain.html
     */
    UpdateDefaultMailDomain = "workmail:UpdateDefaultMailDomain",
    /**
     * Grants permission to update details of a group
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateGroup.html
     */
    UpdateGroup = "workmail:UpdateGroup",
    /**
     * Grants permission to update an existing impersonation role for the given Amazon
     * WorkMail organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateImpersonationRole.html
     */
    UpdateImpersonationRole = "workmail:UpdateImpersonationRole",
    /**
     * Grants permission to update the details of an inbound email flow rule which wil
     * l apply to all email sent to an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/modify-email-flow-rule.html
     */
    UpdateInboundMailFlowRule = "workmail:UpdateInboundMailFlowRule",
    /**
     * Grants permission to update the maximum size (in MB) of the user's mailbox
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateMailboxQuota.html
     */
    UpdateMailboxQuota = "workmail:UpdateMailboxQuota",
    /**
     * Grants permission to update a mobile device access rule
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateMobileDeviceAccessRule.html
     */
    UpdateMobileDeviceAccessRule = "workmail:UpdateMobileDeviceAccessRule",
    /**
     * Grants permission to update the details of an outbound email flow rule which wi
     * ll apply to all email sent from an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/modify-email-flow-rule.html
     */
    UpdateOutboundMailFlowRule = "workmail:UpdateOutboundMailFlowRule",
    /**
     * Grants permission to update the primary email for a user, group, or resource
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdatePrimaryEmailAddress.html
     */
    UpdatePrimaryEmailAddress = "workmail:UpdatePrimaryEmailAddress",
    /**
     * Grants permission to update details for the resource
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateResource.html
     */
    UpdateResource = "workmail:UpdateResource",
    /**
     * Grants permission to update the details of an existing SMTP gateway registered
     * to an organization
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/smtp-gateway.html
     */
    UpdateSmtpGateway = "workmail:UpdateSmtpGateway",
    /**
     * Grants permission to update details of a user
     *
     * See https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateUser.html
     */
    UpdateUser = "workmail:UpdateUser",
    /**
     * Grants permission to remotely wipe the mobile device associated with a user's a
     * ccount
     *
     * See https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html#remote_wipe_device
     */
    WipeMobileDevice = "workmail:WipeMobileDevice"
}